General
- Target 2026-08-05_797a68d6890f39040ed5b68a9f00976d_elex_wannacry
- Size 64KB
- Sample260805-dhrfbaak5v
- SHA256 e0a9206b4b51a4ef88b7cad418037e7b2f5ac66e5b1202ecfdcadd485c4f65c3
- MD5 797a68d6890f39040ed5b68a9f00976d
- SHA1 538ca755d00266b07b6c2d6c70b13e3c94b3f9b7
- SHA512 16958cc3e4f2638f718c2e60ac9c4478de299dc9b0b14b461d936826c9d232e555b6331b9e702c76311a46e2bc18d9fdf2ff4dd2c9cddb627a996b163f896127
- SSDEEP 192:ObOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwtY04/CFxyNhoy5tT:ObLwOs8AHsc4sMfwhKQLro/4/CFsrdT
- TLSH T11E53414A269544A3F94EB1B82CE44D7C61AF55C051296B7ED7E0EB232327DE1D42F20F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-05_797a68d6890f39040ed5b68a9f00976d_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_797a68d6890f39040ed5b68a9f00976d_elex_wannacry.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_797a68d6890f39040ed5b68a9f00976d_elex_wannacry
- Size 64KB
- SHA256 e0a9206b4b51a4ef88b7cad418037e7b2f5ac66e5b1202ecfdcadd485c4f65c3
- MD5 797a68d6890f39040ed5b68a9f00976d
- SHA1 538ca755d00266b07b6c2d6c70b13e3c94b3f9b7
- SHA512 16958cc3e4f2638f718c2e60ac9c4478de299dc9b0b14b461d936826c9d232e555b6331b9e702c76311a46e2bc18d9fdf2ff4dd2c9cddb627a996b163f896127
- SSDEEP 192:ObOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwtY04/CFxyNhoy5tT:ObLwOs8AHsc4sMfwhKQLro/4/CFsrdT
- TLSH T11E53414A269544A3F94EB1B82CE44D7C61AF55C051296B7ED7E0EB232327DE1D42F20F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE