90bebaf5d033d2377f8cd0056dd80cf768341ca0f40142b78a639ad17294d4c3

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 11:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-03_5b3f75ced063e80109b01afe3be7e34d_elex_wannacry.exe
Size 700KB
Sample260804-ny346avycy
SHA256 90bebaf5d033d2377f8cd0056dd80cf768341ca0f40142b78a639ad17294d4c3
MD5 5b3f75ced063e80109b01afe3be7e34d
SHA1 3638b98780db2a96148ab3e4040abf5c548b2ae4
SHA512 843f98baeee32c45c122c5ac778bf96667614fd3c1422b1e5bfae081e9ffbda26e3df10c141f535e5743301b67625f56b70cd0d9949ed77e5111ab8c00ed2e98
SSDEEP 12288:Hy99FKT20YUT2B6uZ7B6uZhZfKE2cjZHT4xIqaDGF/UZE3MFYw6YAPpWkye9Aq4x:S93KC01T2B6CB6ebZzNM/U23MFY0ARW9
TLSH
T16BE42368E6451C3EE44205B12D8349D60F3EB8ABDBA7F52BD724C24B6E707CA8775390
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-08-03_5b3f75ced063e80109b01afe3be7e34d_elex_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-03_5b3f75ced063e80109b01afe3be7e34d_elex_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-03_5b3f75ced063e80109b01afe3be7e34d_elex_wannacry.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2716

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2716-0-0x0000000000400000-0x000000000042D000-memory.dmp

Download