General
- Target 2026-08-04_18d5c9708cfe4958afca5cdd00f804d2_elex_wannacry
- Size 404KB
- Sample260804-j3ym1sap8s
- SHA256 441a8881e1ff3431198ce83d9128cf825076d3d12b330ddd4e4621f5ce712d33
- MD5 18d5c9708cfe4958afca5cdd00f804d2
- SHA1 48aaa62ac8d25aaa0a720ab0fcb80b57b7c047f8
- SHA512 7c94bc89b4601b0e9c22c64bbbdc0a694fd53bcd204806b5beff3ea1fc77ec369a7680c8ab29409e70332a598c7169478a79466c65a35b6c42366cb889195e49
- SSDEEP 6144:Z+0kkwwXcl8EhOK9H4esZE6Z/iz4jxcK58M0xK:Z+qwwOHdz6Iz4jt5fgK
- TLSH T1CE94ADC07709F069D49A98F05910B8E0A3A22CE29AF7754226E4735C193DB4EFEEF715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_18d5c9708cfe4958afca5cdd00f804d2_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_18d5c9708cfe4958afca5cdd00f804d2_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_18d5c9708cfe4958afca5cdd00f804d2_elex_wannacry
- Size 404KB
- SHA256 441a8881e1ff3431198ce83d9128cf825076d3d12b330ddd4e4621f5ce712d33
- MD5 18d5c9708cfe4958afca5cdd00f804d2
- SHA1 48aaa62ac8d25aaa0a720ab0fcb80b57b7c047f8
- SHA512 7c94bc89b4601b0e9c22c64bbbdc0a694fd53bcd204806b5beff3ea1fc77ec369a7680c8ab29409e70332a598c7169478a79466c65a35b6c42366cb889195e49
- SSDEEP 6144:Z+0kkwwXcl8EhOK9H4esZE6Z/iz4jxcK58M0xK:Z+qwwOHdz6Iz4jt5fgK
- TLSH T1CE94ADC07709F069D49A98F05910B8E0A3A22CE29AF7754226E4735C193DB4EFEEF715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.