General
- Target 2026-08-03_17c6cd04967d0905e7c45898e1ce92c6_elex_wannacry
- Size 384KB
- Sample260803-xgwheseb26
- SHA256 d300c989de2fa26564abfd063af88afa547a4c00c58582cb35af8e8c91410eb8
- MD5 17c6cd04967d0905e7c45898e1ce92c6
- SHA1 cc354945cf871690ddb2610d60c69f376974b367
- SHA512 3960bb34c17016cd14a2a8c1777af3c5e950642f6f31080055bf84aceabb9b8ab6284a935652864bec72a7affc990f1ad029569927c7234df27df4132927be84
- SSDEEP 6144:mRPfXrcV/lYUGtwB3RCPpOf5hleXH2YLVKfwmveBsNU1:m5r6/SU0wBRCxEh4XHVLVQxA
- TLSH T182848C69F936F17CE1C488F64ED6A0F657A50D11AE0AEF42E42C77EF5C321E2DA140A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_17c6cd04967d0905e7c45898e1ce92c6_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_17c6cd04967d0905e7c45898e1ce92c6_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_17c6cd04967d0905e7c45898e1ce92c6_elex_wannacry
- Size 384KB
- SHA256 d300c989de2fa26564abfd063af88afa547a4c00c58582cb35af8e8c91410eb8
- MD5 17c6cd04967d0905e7c45898e1ce92c6
- SHA1 cc354945cf871690ddb2610d60c69f376974b367
- SHA512 3960bb34c17016cd14a2a8c1777af3c5e950642f6f31080055bf84aceabb9b8ab6284a935652864bec72a7affc990f1ad029569927c7234df27df4132927be84
- SSDEEP 6144:mRPfXrcV/lYUGtwB3RCPpOf5hleXH2YLVKfwmveBsNU1:m5r6/SU0wBRCxEh4XHVLVQxA
- TLSH T182848C69F936F17CE1C488F64ED6A0F657A50D11AE0AEF42E42C77EF5C321E2DA140A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.