General
- Target 2026-08-04_57a5b1762a570649ffe3afe169522549_elex_wannacry
- Size 404KB
- Sample260804-h2mnpayxbt
- SHA256 501aac4895072680b4c92db65bc92dc165c1c406d9c06721f31f3438566d659b
- MD5 57a5b1762a570649ffe3afe169522549
- SHA1 03d5a82de9e3a73985e58f10ea61df5bd0680ba7
- SHA512 dccb11dc955140cebf5f2095bf9cba48dfc335512164ad3779bf0ada2119847a3f9bede9da71d1d8f942d6b927a3fdf78769242259d32e176a75d6de26e98b78
- SSDEEP 3072:UoVDjW0Lmkyws+bZ8EYXYFO+4qJEYkzBXBxh3rbX8fGT3tgI3uLPuGIBYu7IJkp4:d+0MTEYIFedzBXBj0fPFuGWYtJk
- TLSH T15A949D487559FD9CD9A80A300CE689B433211E2C4D21EA17A4B8B35C2DF3FB75FA9917
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_57a5b1762a570649ffe3afe169522549_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_57a5b1762a570649ffe3afe169522549_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_57a5b1762a570649ffe3afe169522549_elex_wannacry
- Size 404KB
- SHA256 501aac4895072680b4c92db65bc92dc165c1c406d9c06721f31f3438566d659b
- MD5 57a5b1762a570649ffe3afe169522549
- SHA1 03d5a82de9e3a73985e58f10ea61df5bd0680ba7
- SHA512 dccb11dc955140cebf5f2095bf9cba48dfc335512164ad3779bf0ada2119847a3f9bede9da71d1d8f942d6b927a3fdf78769242259d32e176a75d6de26e98b78
- SSDEEP 3072:UoVDjW0Lmkyws+bZ8EYXYFO+4qJEYkzBXBxh3rbX8fGT3tgI3uLPuGIBYu7IJkp4:d+0MTEYIFedzBXBj0fPFuGWYtJk
- TLSH T15A949D487559FD9CD9A80A300CE689B433211E2C4D21EA17A4B8B35C2DF3FB75FA9917
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.