General
- Target 2026-08-05_f325b96d04b121f8684e0457d7527d4c_elex_wannacry
- Size 14KB
- Sample260805-faq6pade96
- SHA256 a5e79705ff93e8ec7f4d925b898c065768324aa708dd443727efed97fef4c934
- MD5 f325b96d04b121f8684e0457d7527d4c
- SHA1 77b5b523b4cd248effe243a8826685947721fd7a
- SHA512 abe4497f939c6d70caaa7fd352ba17cf3a115bb9901560e37714fec36d15fe183646a886a9eb0bb4b7b916e2f4adde1fd53661ea3f87eea8e7ed01f94dda184a
- SSDEEP 192:j4vFJB76X8aN3T/MC4kmikwuCl1oynTcd3W6uCcbJrAAAAA4mSHA/Gpy/e0:j4nBHA7f46l1JcV4rAAAAAyA/GKB
- TLSH T15B62E8265BE489B2F3B68E3485FB935DBA3574C3FC12060ED5589348C933712DC1AA2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-05_f325b96d04b121f8684e0457d7527d4c_elex_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_f325b96d04b121f8684e0457d7527d4c_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_f325b96d04b121f8684e0457d7527d4c_elex_wannacry
- Size 14KB
- SHA256 a5e79705ff93e8ec7f4d925b898c065768324aa708dd443727efed97fef4c934
- MD5 f325b96d04b121f8684e0457d7527d4c
- SHA1 77b5b523b4cd248effe243a8826685947721fd7a
- SHA512 abe4497f939c6d70caaa7fd352ba17cf3a115bb9901560e37714fec36d15fe183646a886a9eb0bb4b7b916e2f4adde1fd53661ea3f87eea8e7ed01f94dda184a
- SSDEEP 192:j4vFJB76X8aN3T/MC4kmikwuCl1oynTcd3W6uCcbJrAAAAA4mSHA/Gpy/e0:j4nBHA7f46l1JcV4rAAAAAyA/GKB
- TLSH T15B62E8265BE489B2F3B68E3485FB935DBA3574C3FC12060ED5589348C933712DC1AA2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Waski payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE