General
- Target 2026-08-03_6a040169fdc8adf74f151bd2c57e4b5d_elex_wannacry
- Size 384KB
- Sample260804-nngheayflc
- SHA256 a28e562c0b7334fa4f606e11cb027cc3d77b2a4a37b5cf4ba65588f80b0f94af
- MD5 6a040169fdc8adf74f151bd2c57e4b5d
- SHA1 020d15942d20ead0557ebdcde498362a44826dd0
- SHA512 d494b377640dbe06318d0e59fb300c502e633ab05ad30ad3ba88158e6042752c71fb94c777bd0f1d855a7f75a70d22de03b0cc1d0216f96adc7aa90a6aefd0d9
- SSDEEP 3072:c0HJ6iM+jHWkhznI5Jt3KHrl9+XVmF8aqSVugX7s0YLIQK0G7MxB6MPBQ1+bHfG:9XM6WOEzKHbs9aqfgI0oIUyMxLq+bHfG
- TLSH T1CB84AD71B854E51FCE7913BE6DA8F5FE92706C2D5F1405E6A9C0F74C30326928E82B46
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_6a040169fdc8adf74f151bd2c57e4b5d_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_6a040169fdc8adf74f151bd2c57e4b5d_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_6a040169fdc8adf74f151bd2c57e4b5d_elex_wannacry
- Size 384KB
- SHA256 a28e562c0b7334fa4f606e11cb027cc3d77b2a4a37b5cf4ba65588f80b0f94af
- MD5 6a040169fdc8adf74f151bd2c57e4b5d
- SHA1 020d15942d20ead0557ebdcde498362a44826dd0
- SHA512 d494b377640dbe06318d0e59fb300c502e633ab05ad30ad3ba88158e6042752c71fb94c777bd0f1d855a7f75a70d22de03b0cc1d0216f96adc7aa90a6aefd0d9
- SSDEEP 3072:c0HJ6iM+jHWkhznI5Jt3KHrl9+XVmF8aqSVugX7s0YLIQK0G7MxB6MPBQ1+bHfG:9XM6WOEzKHbs9aqfgI0oIUyMxLq+bHfG
- TLSH T1CB84AD71B854E51FCE7913BE6DA8F5FE92706C2D5F1405E6A9C0F74C30326928E82B46
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.