Analysis
- max time kernel
150s - max time network
125s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
04/08/2026, 10:42
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
General
- Target 2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe
- Size 2.2MB
- Sample260804-mrnkfscr2v
- SHA256 cd8740e4d570e78742ea500e78dcd4353c75f70894d11c97cf01b69f9adb6a4f
- MD5 9891ff98b7edc769748eaeef52dfd9b2
- SHA1 6b08393fe1a53d3a945cb161c33fdf540813d099
- SHA512 19a559ff60a6f03707c4d2e61c34d6bb057b4e66714aea7779a23d1e08979a82d17eab30fe74d27e884e854ae750b4a1820c7a59d3c5937d87ecec9fe7e51bf9
- SSDEEP 49152:hY7xV0QnQNFBtGp2G9PeP5vVHrVXyq9cG10YtJnMx9bcT1r:hY7x6rG5PS9XyDGKYtZi9oF
- TLSH T1FCB53302BF44C3F3D53006B1209D0C7D7781AA104715C94E9A4ABF2E5DBA92F9E9AF4B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10
Malware Config
Signatures
- Drops file in Program Files directory 41 IoCs
description ioc Process File created C:\Program Files\Plus!\Themes\Lotus.Theme 2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Lotus\Lotus pen.cur 2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Lotus\Lotus move.ani 2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Lotus\Lotus program error.wav 2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Lotus\Lotus default.wav 2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Lotus\Lotus max.wav 2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Lotus\Lotus min.wav 2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Lotus\Lotus asterisk.wav 2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Lotus\Lotus exclamation.wav 2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Lotus\Lotus working.ani 2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Lotus\Lotus busy.ani 2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Lotus\Lotus logo.SYS 2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Lotus\Lotus vert.ani 2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Lotus\Lotus beam.cur 2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Lotus\Lotus E.ico 2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Lotus\Lotus logos.SYS 2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Lotus\Lotus WVleft.bmp 2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Lotus\Lotus start.wav 2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Lotus\Lotus horis.ani 2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Lotus\Lotus F.ico 2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Lotus\Lotus logow.SYS 2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Lotus\Lotus question.wav 2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Lotus\Lotus rec.wav 2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Lotus\Lotus help.cur 2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Lotus\Lotus no.cur 2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Lotus\Lotus D.ico 2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Lotus\Lotus closed folder.ico 2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Lotus\Lotus open folder.ico 2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Lotus\Lotus WVline.gif 2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Lotus\Lotus critical stop.wav 2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Lotus\Lotus N.ico 2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Lotus\Lotus WVlogo.gif 2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Lotus\Lotus new mail.wav 2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Lotus\Lotus cross.cur 2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Lotus\Lotus diag1.ani 2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Lotus\Lotus wallpaper.jpg 2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Lotus\Lotus nrml.cur 2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Lotus\Lotus exit.wav 2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Lotus\Lotus diag2.ani 2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Lotus\Lotus up.ani 2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe File created C:\Program Files\Plus!\Themes\Lotus\Lotus C.ico 2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2536 2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe 2536 2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-03_9891ff98b7edc769748eaeef52dfd9b2_elex_emotet_wannacry.exe"1⤵
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2536