Analysis
- max time kernel
148s - max time network
140s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
04/08/2026, 09:40
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
General
- Target 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe
- Size 2.0MB
- Sample260804-lnbk2sck6v
- SHA256 228b7fa8a992a5f789f4a90b31c20916d86aaf97641277a2008c423e63490b03
- MD5 cc95f40dfe23508ee39100ebe4edb727
- SHA1 8c94a13cffb226089073af73e6567a425a142e63
- SHA512 d98606874268a77a23dc1fe03bb4a7642fa87ed3809d37b4640c4284c929b7d3c42acef6fc47415b9c6df7df42be47c85966b1e3ef9667cfa9cce28886288f76
- SSDEEP 49152:hY7xcA7gxOsvqziwH15TvdNpXro55Cg17Dy2M9e6Lspr8ndlWmwLH:hY7xH7l0fwH15TvKCe/yfk6wprgom2
- TLSH T167A533557BC9DF74E03601360ABD4EF6C77BED02CE2B9A5717906C2AB922A146F1070B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Drops file in System32 directory 1 IoCs
description ioc Process File created C:\Windows\SysWOW64\Magna Carta2.scr 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe - Drops file in Program Files directory 41 IoCs
description ioc Process File created C:\Program Files\Plus!\Themes\Magna Carta1\Magna Carta1 open folder.ico 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Magna Carta1\Magna Carta1 up.ani 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Magna Carta1\Magna Carta1 no.ani 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Magna Carta1\Magna Carta1N.ico 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Magna Carta1\Magna Carta1logow.SYS 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Magna Carta1.Theme 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Magna Carta1\Magna Carta1 question.wav 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Magna Carta1\Magna Carta1 working.ani 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Magna Carta1\Magna Carta1 beam.ani 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Magna Carta1\Magna Carta1 diag1.ani 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Magna Carta1\Magna Carte1 wallpaper.jpg 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Magna Carta1\Magna Carta1WVline.gif 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Magna Carta1\Magna Carta1 critical stop.wav 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Magna Carta1\Magna Carta1 exit.wav 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Magna Carta1\Magna Carta1 start.wav 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Magna Carta1\Magna Carta1 busy.ani 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Magna Carta1\Magna Carta1 cross.ani 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Magna Carta1\Magna Carta1F.ico 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Magna Carta1\Magna Carta1logo.SYS 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Magna Carta1\Magna Carta1WVleft.bmp 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Magna Carta1\Magna Carta1WVlogo.gif 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Magna Carta1\Magna Carta1nrml.cur 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Magna Carta1\Magna Carta1 program error.wav 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Magna Carta1\Magna Carta1 min.wav 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Magna Carta1\Magna Carta1 asterisk.wav 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Magna Carta1\Magna Carta1 new mail.wav 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Magna Carta1\Magna Carta1 pen.ani 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Magna Carta1\Magna Carta1E.ico 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Magna Carta1\Magna Carta1D.ico 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Magna Carta1\Magna Carta1 rec.wav 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Magna Carta1\Magna Carta1 help.ani 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Magna Carta1\Magna Carta1 horis.ani 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Magna Carta1\Magna Carta1 diag2.ani 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Magna Carta1\Magna Carta1 move.ani 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Magna Carta1\Magna Carta1C.ico 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Magna Carta1\Magna Carta1 closed folder.ico 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Magna Carta1\Magna Carta1logos.SYS 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Magna Carta1\Magna Carta1 default.wav 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Magna Carta1\Magna Carta1 max.wav 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Magna Carta1\Magna Carta1 exclamation.wav 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Magna Carta1\Magna Carta1 vert.ani 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 5936 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe 5936 2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-03_cc95f40dfe23508ee39100ebe4edb727_elex_emotet_wannacry.exe"1⤵
- Drops file in System32 directory
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:5936