General
- Target 2026-08-04_57a5b1762a570649ffe3afe169522549_elex_wannacry
- Size 404KB
- Sample260804-h2mnpayxbt
- SHA256 501aac4895072680b4c92db65bc92dc165c1c406d9c06721f31f3438566d659b
- MD5 57a5b1762a570649ffe3afe169522549
- SHA1 03d5a82de9e3a73985e58f10ea61df5bd0680ba7
- SHA512 dccb11dc955140cebf5f2095bf9cba48dfc335512164ad3779bf0ada2119847a3f9bede9da71d1d8f942d6b927a3fdf78769242259d32e176a75d6de26e98b78
- SSDEEP 3072:UoVDjW0Lmkyws+bZ8EYXYFO+4qJEYkzBXBxh3rbX8fGT3tgI3uLPuGIBYu7IJkp4:d+0MTEYIFedzBXBj0fPFuGWYtJk
- TLSH T15A949D487559FD9CD9A80A300CE689B433211E2C4D21EA17A4B8B35C2DF3FB75FA9917
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_57a5b1762a570649ffe3afe169522549_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_57a5b1762a570649ffe3afe169522549_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_57a5b1762a570649ffe3afe169522549_elex_wannacry
- Size 404KB
- SHA256 501aac4895072680b4c92db65bc92dc165c1c406d9c06721f31f3438566d659b
- MD5 57a5b1762a570649ffe3afe169522549
- SHA1 03d5a82de9e3a73985e58f10ea61df5bd0680ba7
- SHA512 dccb11dc955140cebf5f2095bf9cba48dfc335512164ad3779bf0ada2119847a3f9bede9da71d1d8f942d6b927a3fdf78769242259d32e176a75d6de26e98b78
- SSDEEP 3072:UoVDjW0Lmkyws+bZ8EYXYFO+4qJEYkzBXBxh3rbX8fGT3tgI3uLPuGIBYu7IJkp4:d+0MTEYIFedzBXBj0fPFuGWYtJk
- TLSH T15A949D487559FD9CD9A80A300CE689B433211E2C4D21EA17A4B8B35C2DF3FB75FA9917
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.