General
- Target 2026-08-04_61ee34fd5941d9ce8bcc11d6a71ce9a4_elex_wannacry
- Size 64KB
- Sample260804-s2g4batdkh
- SHA256 82ed2afdde7625f96abb4d189a1031aaa1672dfb1e2d002db2a861ca4c7e85c2
- MD5 61ee34fd5941d9ce8bcc11d6a71ce9a4
- SHA1 cc622182de9534e8858734d3d3c65ac0a0a82d6a
- SHA512 01bee74a45f87279fa94042152aa8df18495d1f7f85a333b0c348fc6f67654b7bc61b15a6fcb1e40f42a2e0da2c46eb774cefa13a03b89e4f59929e093dced5e
- SSDEEP 192:gbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwE1Y04/CFxyNhoy5t:gbLwOs8AHsc4sMfwhKQLroK4/CFsrd
- TLSH T1C75307834BDA9CF2FB91117108794BB9927B99D4910EBEDFAF90CD150077292E83A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-04_61ee34fd5941d9ce8bcc11d6a71ce9a4_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_61ee34fd5941d9ce8bcc11d6a71ce9a4_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_61ee34fd5941d9ce8bcc11d6a71ce9a4_elex_wannacry
- Size 64KB
- SHA256 82ed2afdde7625f96abb4d189a1031aaa1672dfb1e2d002db2a861ca4c7e85c2
- MD5 61ee34fd5941d9ce8bcc11d6a71ce9a4
- SHA1 cc622182de9534e8858734d3d3c65ac0a0a82d6a
- SHA512 01bee74a45f87279fa94042152aa8df18495d1f7f85a333b0c348fc6f67654b7bc61b15a6fcb1e40f42a2e0da2c46eb774cefa13a03b89e4f59929e093dced5e
- SSDEEP 192:gbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwE1Y04/CFxyNhoy5t:gbLwOs8AHsc4sMfwhKQLroK4/CFsrd
- TLSH T1C75307834BDA9CF2FB91117108794BB9927B99D4910EBEDFAF90CD150077292E83A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE