General
- Target 2026-08-03_f492138e4aeefb5f3f5c982c9b53a672_elex_wannacry
- Size 404KB
- Sample260803-tynx5acb72
- SHA256 f016323f6f40ec2caa0a7fc98de73f5403ff2fb3ddce4c9d9c7f6ce1c9b437a4
- MD5 f492138e4aeefb5f3f5c982c9b53a672
- SHA1 7343782eaee8a94a80a7d3de6b4ea7311b42820e
- SHA512 2d9bce88323455da670e6eda409ee92c0254fbd0d77baff28c27cec1535143ddede825eebe20c548cfc3f99fda4d7bdcadf14904c0f4b4446824678a97cff800
- SSDEEP 6144:d+0Ogr/PTDscNMaswV08iRSSyT0gVaslZR:d+bUPTiB8/SyT0gVL/
- TLSH T1A8949D30B413E49CEAA64A711C127EF8B367EEA10C28741E7CA47F4E5E31D418E57E5A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_f492138e4aeefb5f3f5c982c9b53a672_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_f492138e4aeefb5f3f5c982c9b53a672_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_f492138e4aeefb5f3f5c982c9b53a672_elex_wannacry
- Size 404KB
- SHA256 f016323f6f40ec2caa0a7fc98de73f5403ff2fb3ddce4c9d9c7f6ce1c9b437a4
- MD5 f492138e4aeefb5f3f5c982c9b53a672
- SHA1 7343782eaee8a94a80a7d3de6b4ea7311b42820e
- SHA512 2d9bce88323455da670e6eda409ee92c0254fbd0d77baff28c27cec1535143ddede825eebe20c548cfc3f99fda4d7bdcadf14904c0f4b4446824678a97cff800
- SSDEEP 6144:d+0Ogr/PTDscNMaswV08iRSSyT0gVaslZR:d+bUPTiB8/SyT0gVL/
- TLSH T1A8949D30B413E49CEAA64A711C127EF8B367EEA10C28741E7CA47F4E5E31D418E57E5A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.