General
- Target 2026-08-04_14c1f14622f5966335edaed01e3a1c81_elex_wannacry
- Size 404KB
- Sample260804-j6wylazybv
- SHA256 e6bd3328225e6198ad542f9cd203cd00d979369871339d01755ab6508adfadb8
- MD5 14c1f14622f5966335edaed01e3a1c81
- SHA1 a592599c7da2a8457de4a528e1292ae0f4d6bc0d
- SHA512 50e9c6c77f7d87641e3cd0771a4c11e4df12a5f6f829484089565cf8beb83cfdcdd02876f7a99b7a52b5771acbc7f7c39c54b0d3afc6ce2c4be1b2004d9c7fa3
- SSDEEP 6144:Z+0k8pDdNGsregTT/0pfvREjW+bqcbrZw7:Z+iVPGsygTT/0pfvREZrY
- TLSH T1E6948C326DE7B0CDF75E48B64AEA82E59267ED21BD91A17CE04CF74D8E312039D83215
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_14c1f14622f5966335edaed01e3a1c81_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_14c1f14622f5966335edaed01e3a1c81_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_14c1f14622f5966335edaed01e3a1c81_elex_wannacry
- Size 404KB
- SHA256 e6bd3328225e6198ad542f9cd203cd00d979369871339d01755ab6508adfadb8
- MD5 14c1f14622f5966335edaed01e3a1c81
- SHA1 a592599c7da2a8457de4a528e1292ae0f4d6bc0d
- SHA512 50e9c6c77f7d87641e3cd0771a4c11e4df12a5f6f829484089565cf8beb83cfdcdd02876f7a99b7a52b5771acbc7f7c39c54b0d3afc6ce2c4be1b2004d9c7fa3
- SSDEEP 6144:Z+0k8pDdNGsregTT/0pfvREjW+bqcbrZw7:Z+iVPGsygTT/0pfvREZrY
- TLSH T1E6948C326DE7B0CDF75E48B64AEA82E59267ED21BD91A17CE04CF74D8E312039D83215
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.