0c3af1d995404a60676c21ebcab4eff1b6bd7a6446eb5a6ea3a563036b65abdf

Analysis

max time kernel
148s
max time network
138s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 22:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-04_f4224b91c836f77f99d1e0844514377c_elex_wannacry.exe
Size 976KB
Sample260804-1ynexseq4t
SHA256 0c3af1d995404a60676c21ebcab4eff1b6bd7a6446eb5a6ea3a563036b65abdf
MD5 f4224b91c836f77f99d1e0844514377c
SHA1 1f7254d5a98158c1497128ebe4c015eccb1daa93
SHA512 fce1420c1037172c0ad64f705f57730fdef268bcf37c96667eb2a3afb20fafceb96dd481cd41ae1fa1005aa046d3e8de3f679ae948319a4221cddeea85801a00
SSDEEP 24576:S9C0XrUMFDsTB6vGPG2LW+P+mz8Or3hAvYCRaMNX6:S9C0Xgfe2Dhrs0Ms
TLSH
T17B252334B20390F4E1590FB10B1EAE819F3A70351EB47527AB948BB7BE3B9D6B635141
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-08-04_f4224b91c836f77f99d1e0844514377c_elex_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-04_f4224b91c836f77f99d1e0844514377c_elex_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-04_f4224b91c836f77f99d1e0844514377c_elex_wannacry.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4904

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4904-0-0x0000000000400000-0x000000000042D000-memory.dmp

Download