dd31278564058244b8f68695015175ee368c32d4213f75d0afa5b12a220d4c48

Analysis

max time kernel
150s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 20:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-04_487d28ac4be40d6557107c8f2f61d269_elex_wannacry.exe
Size 963KB
Sample260804-y698jsdp9x
SHA256 dd31278564058244b8f68695015175ee368c32d4213f75d0afa5b12a220d4c48
MD5 487d28ac4be40d6557107c8f2f61d269
SHA1 3a320a5b4891532d742bdd3b08da05ec5ca61bab
SHA512 f68fe82a4bfa93160e122d266f5a9a82fe89de307c689ee57c0032cc2c135be50cd2f1b783adc379f9a6e31ccf748d58819225c27bb77eed4d344a45c2da941f
SSDEEP 24576:S9C0XrUMFDsTB6vGPG2LW+P+mz8kOvROKlUlXa02:S9C0Xgfe2DfKlUY02
TLSH
T176252330F21340B0F5641F310E5EAEC5A67A213059B56123BB419EF7EE7F5E2B672289
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-08-04_487d28ac4be40d6557107c8f2f61d269_elex_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-04_487d28ac4be40d6557107c8f2f61d269_elex_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-04_487d28ac4be40d6557107c8f2f61d269_elex_wannacry.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1416

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1416-0-0x0000000000400000-0x000000000042D000-memory.dmp

Download