General
- Target 2026-08-04_a6ec980da3311e48e9e207045877fe9d_elex_wannacry
- Size 404KB
- Sample260804-gpp3lsxtbw
- SHA256 0e64be327221f2d5b930d25ba4b0d7f45184eee5f5af9336e11c05b2473333ef
- MD5 a6ec980da3311e48e9e207045877fe9d
- SHA1 971b58f5b639f8633e5adb9df1b5dda35d0ca657
- SHA512 77f2a330d32e98f7294bd47a8d1c7a7252bed47b62585284ccd861e6a02c191c18e782b00ef4689d3ad79273de74b0525d35cc4d600b3697bbcf26ffb4244ea1
- SSDEEP 3072:UoVDjW0LitUea82TfglXpHrT4YsZlMUrDPyNrrN3NOR2v6NgfSy7683/y4XXK7tz:d+0kpSTfeX5P4Ysz1PK1NjA4XX
- TLSH T1B0947B607C62F13EFED05AB05FF784E1E662AC750D34752220093F6E1E71A125C696F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_a6ec980da3311e48e9e207045877fe9d_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_a6ec980da3311e48e9e207045877fe9d_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_a6ec980da3311e48e9e207045877fe9d_elex_wannacry
- Size 404KB
- SHA256 0e64be327221f2d5b930d25ba4b0d7f45184eee5f5af9336e11c05b2473333ef
- MD5 a6ec980da3311e48e9e207045877fe9d
- SHA1 971b58f5b639f8633e5adb9df1b5dda35d0ca657
- SHA512 77f2a330d32e98f7294bd47a8d1c7a7252bed47b62585284ccd861e6a02c191c18e782b00ef4689d3ad79273de74b0525d35cc4d600b3697bbcf26ffb4244ea1
- SSDEEP 3072:UoVDjW0LitUea82TfglXpHrT4YsZlMUrDPyNrrN3NOR2v6NgfSy7683/y4XXK7tz:d+0kpSTfeX5P4Ysz1PK1NjA4XX
- TLSH T1B0947B607C62F13EFED05AB05FF784E1E662AC750D34752220093F6E1E71A125C696F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.