General
- Target 2026-08-04_bb1bf7aebf996aa9f3cac77c021db385_elex_wannacry
- Size 60KB
- Sample260804-w658gsxekf
- SHA256 ab736956a9145601f266183f4222c3057c68530c9e3b7ba432cc79af9b5c6c01
- MD5 bb1bf7aebf996aa9f3cac77c021db385
- SHA1 2979e515da3c1b66f03e9c1f6e03ed0b9079b3c7
- SHA512 c6c092737fc38c6bf3b36ddc3820f30f75458bc07395555499642a0b11f9287e7c77779af0c987597041243585664846c605f8ecb79d25df2b918992c9990308
- SSDEEP 192:vbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqw+Y04/CFxyNhoy5t:vbLwOs8AHsc4sMfwhKQLroE4/CFsrd
- TLSH T12F53F7834BEE9CF2F691117108798BB9927B99D4950EBE9FBB90CD150037292E53A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-04_bb1bf7aebf996aa9f3cac77c021db385_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_bb1bf7aebf996aa9f3cac77c021db385_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_bb1bf7aebf996aa9f3cac77c021db385_elex_wannacry
- Size 60KB
- SHA256 ab736956a9145601f266183f4222c3057c68530c9e3b7ba432cc79af9b5c6c01
- MD5 bb1bf7aebf996aa9f3cac77c021db385
- SHA1 2979e515da3c1b66f03e9c1f6e03ed0b9079b3c7
- SHA512 c6c092737fc38c6bf3b36ddc3820f30f75458bc07395555499642a0b11f9287e7c77779af0c987597041243585664846c605f8ecb79d25df2b918992c9990308
- SSDEEP 192:vbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqw+Y04/CFxyNhoy5t:vbLwOs8AHsc4sMfwhKQLroE4/CFsrd
- TLSH T12F53F7834BEE9CF2F691117108798BB9927B99D4950EBE9FBB90CD150037292E53A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE