General
- Target 2026-08-02_0eb544ec546e7e7e51a41749c98448ed_elex_wannacry
- Size 384KB
- Sample260802-yctzga1aph
- SHA256 663d86e4f9162fcd89816a9b6cad4034fc2c6ab12c8267084b395bb099b3400b
- MD5 0eb544ec546e7e7e51a41749c98448ed
- SHA1 858bdabe8d17c7c0f208b8dbbfab39f13582c0bc
- SHA512 697f71cc1d74efc6f1501c73a5c6a0780fb41f189c3406ee24e96b72c7a28b6bb8c118a7f0b77ff40d8ea5afac7bc6b7f13e715286e684211dd54eaca0e14415
- SSDEEP 3072:iDZvXHbnaUf34m+z4+EDurC9db5dpxgRA7TkrmvOpPNCWbpiUwqmLoJoSYGhdkL:mRTfMJku+v5dYA7TkqvzUk1oJaGM
- TLSH T188846979730AD97CC6A309308D50FABBA7E05CA50C105822625D37BF5A3FAEA7F445C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_0eb544ec546e7e7e51a41749c98448ed_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_0eb544ec546e7e7e51a41749c98448ed_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_0eb544ec546e7e7e51a41749c98448ed_elex_wannacry
- Size 384KB
- SHA256 663d86e4f9162fcd89816a9b6cad4034fc2c6ab12c8267084b395bb099b3400b
- MD5 0eb544ec546e7e7e51a41749c98448ed
- SHA1 858bdabe8d17c7c0f208b8dbbfab39f13582c0bc
- SHA512 697f71cc1d74efc6f1501c73a5c6a0780fb41f189c3406ee24e96b72c7a28b6bb8c118a7f0b77ff40d8ea5afac7bc6b7f13e715286e684211dd54eaca0e14415
- SSDEEP 3072:iDZvXHbnaUf34m+z4+EDurC9db5dpxgRA7TkrmvOpPNCWbpiUwqmLoJoSYGhdkL:mRTfMJku+v5dYA7TkqvzUk1oJaGM
- TLSH T188846979730AD97CC6A309308D50FABBA7E05CA50C105822625D37BF5A3FAEA7F445C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.