General
- Target 2026-08-03_c5572f6d459d3d473e635343f3086d53_elex_wannacry
- Size 64KB
- Sample260803-cnnqyaan91
- SHA256 7b2e451eca6b82c7d65a5f7633ebe991d3c7ba379d9ac0cda26a8cc3a679c95b
- MD5 c5572f6d459d3d473e635343f3086d53
- SHA1 94b0950d8ca32e77514c79c93fd3be8f1b428279
- SHA512 3e2e6c528888e81d4ead29894a966a6124c8cd91ca8b4ba1de41d1d3e5c38bfc6081b74ff96aa8c67b7ba83a5944ce47b4fa85518126ea039b248b4a6e09d986
- SSDEEP 192:ObOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwoPY04/CFxyNhoy5tT:ObLwOs8AHsc4sMfwhKQLrooh4/CFsrdT
- TLSH T10953414A269544A3F94EB1B82CE44D7C61AF55C050296B7EE7E0EB272327DE1D42F20F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-03_c5572f6d459d3d473e635343f3086d53_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_c5572f6d459d3d473e635343f3086d53_elex_wannacry.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_c5572f6d459d3d473e635343f3086d53_elex_wannacry
- Size 64KB
- SHA256 7b2e451eca6b82c7d65a5f7633ebe991d3c7ba379d9ac0cda26a8cc3a679c95b
- MD5 c5572f6d459d3d473e635343f3086d53
- SHA1 94b0950d8ca32e77514c79c93fd3be8f1b428279
- SHA512 3e2e6c528888e81d4ead29894a966a6124c8cd91ca8b4ba1de41d1d3e5c38bfc6081b74ff96aa8c67b7ba83a5944ce47b4fa85518126ea039b248b4a6e09d986
- SSDEEP 192:ObOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwoPY04/CFxyNhoy5tT:ObLwOs8AHsc4sMfwhKQLrooh4/CFsrdT
- TLSH T10953414A269544A3F94EB1B82CE44D7C61AF55C050296B7EE7E0EB272327DE1D42F20F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE