General
- Target 2026-08-04_fa8973be4e753b611c8651339b645277_elex_wannacry
- Size 384KB
- Sample260804-vzhyyaaq2z
- SHA256 697fd4f5b7070e157b67836bcca7bb597796e5d7f6fb7b4c1de310d57db05298
- MD5 fa8973be4e753b611c8651339b645277
- SHA1 4223c352e5de1cd87e77381f6cdaa6957caf0ad4
- SHA512 fd653f49098b335c37627aa0d319b265d46fe68d437a5a9e5babf87b87dca611bc847b41d4dc93355ef231895190acc854ced9b826f7e5cdb19ee4d57b478fa7
- SSDEEP 6144:/CRa972Gy6JIFVN9LGrGAPHaP5CcxvFYZzJQ:Kg5wnVLSrGNxndUzJQ
- TLSH T189847CC67309D5ADDBAC90BB5C6F84F316E02E810C558D07A4B4BB6F663F6C39A0524E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_fa8973be4e753b611c8651339b645277_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_fa8973be4e753b611c8651339b645277_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_fa8973be4e753b611c8651339b645277_elex_wannacry
- Size 384KB
- SHA256 697fd4f5b7070e157b67836bcca7bb597796e5d7f6fb7b4c1de310d57db05298
- MD5 fa8973be4e753b611c8651339b645277
- SHA1 4223c352e5de1cd87e77381f6cdaa6957caf0ad4
- SHA512 fd653f49098b335c37627aa0d319b265d46fe68d437a5a9e5babf87b87dca611bc847b41d4dc93355ef231895190acc854ced9b826f7e5cdb19ee4d57b478fa7
- SSDEEP 6144:/CRa972Gy6JIFVN9LGrGAPHaP5CcxvFYZzJQ:Kg5wnVLSrGNxndUzJQ
- TLSH T189847CC67309D5ADDBAC90BB5C6F84F316E02E810C558D07A4B4BB6F663F6C39A0524E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.