General
- Target 2026-08-04_1212a2d29d1674e9bb8af7b47f2653b0_elex_wannacry
- Size 18KB
- Sample260804-t6epesam61
- SHA256 a976b308681870f734adbf6777eca83d3b01ac2ce02df55db52996f01115e7d8
- MD5 1212a2d29d1674e9bb8af7b47f2653b0
- SHA1 2479355b67f1c751c731b684a45cbe47cb89649e
- SHA512 203fc6aa685ab874fccc8ab114d5e239fe34d6cc7e3bd7fc552e293cffc9393e1bc90316406d501f702cd5106b0e30137e67905606b6e84d4e3c61a1904ead29
- SSDEEP 192:uTk5WckBezHYQRPK6k7TjHwCl1oynzc2Fjmf2mrETLLC0qmg+jjGiEloCFy3nL6I:uTQWckBeEd6ml1pcg7F3GiElpd2v
- TLSH T1208295356BD55D73E3BBDBB596F7C1C66875742B2E03992E80481B882833A11DCA0F89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-04_1212a2d29d1674e9bb8af7b47f2653b0_elex_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_1212a2d29d1674e9bb8af7b47f2653b0_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_1212a2d29d1674e9bb8af7b47f2653b0_elex_wannacry
- Size 18KB
- SHA256 a976b308681870f734adbf6777eca83d3b01ac2ce02df55db52996f01115e7d8
- MD5 1212a2d29d1674e9bb8af7b47f2653b0
- SHA1 2479355b67f1c751c731b684a45cbe47cb89649e
- SHA512 203fc6aa685ab874fccc8ab114d5e239fe34d6cc7e3bd7fc552e293cffc9393e1bc90316406d501f702cd5106b0e30137e67905606b6e84d4e3c61a1904ead29
- SSDEEP 192:uTk5WckBezHYQRPK6k7TjHwCl1oynzc2Fjmf2mrETLLC0qmg+jjGiEloCFy3nL6I:uTQWckBeEd6ml1pcg7F3GiElpd2v
- TLSH T1208295356BD55D73E3BBDBB596F7C1C66875742B2E03992E80481B882833A11DCA0F89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Waski payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE