General
- Target 2026-08-04_f7a9d9030ec17c46a4173527ea726b47_elex_wannacry
- Size 136KB
- Sample260804-fgj1ysdc24
- SHA256 d250842efe5d999ea291c8d94335fb803361dc9f6d343d165dfe4db233f3e37b
- MD5 f7a9d9030ec17c46a4173527ea726b47
- SHA1 5e2ab83f0e79bdedfa4379c463bcf26bbfa5e662
- SHA512 e678c1456703fd85f998febdd0a7aa72692f42307867f51910f47c3565a44a1373560b3e68ea7fa42ec2d2b1337b57ab539c6d7eeb1c3641a5aad891b09f40d4
- SSDEEP 3072:j2AwNc0AXQ7+crm2kBv5TTpf7bLJdxeQ0bnCTc3Fy+sD68OM:CzAGDrkBnjbLZObCTAY7D68p
- TLSH T100D3126A7A864CD1C92415B42072B7329B1332E0D0C5F1E1DF16EDB460FF49AA92DE6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_f7a9d9030ec17c46a4173527ea726b47_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_f7a9d9030ec17c46a4173527ea726b47_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_f7a9d9030ec17c46a4173527ea726b47_elex_wannacry
- Size 136KB
- SHA256 d250842efe5d999ea291c8d94335fb803361dc9f6d343d165dfe4db233f3e37b
- MD5 f7a9d9030ec17c46a4173527ea726b47
- SHA1 5e2ab83f0e79bdedfa4379c463bcf26bbfa5e662
- SHA512 e678c1456703fd85f998febdd0a7aa72692f42307867f51910f47c3565a44a1373560b3e68ea7fa42ec2d2b1337b57ab539c6d7eeb1c3641a5aad891b09f40d4
- SSDEEP 3072:j2AwNc0AXQ7+crm2kBv5TTpf7bLJdxeQ0bnCTc3Fy+sD68OM:CzAGDrkBnjbLZObCTAY7D68p
- TLSH T100D3126A7A864CD1C92415B42072B7329B1332E0D0C5F1E1DF16EDB460FF49AA92DE6F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
2Subvert Trust Controls
1Install Root Certificate
1