General
- Target 2026-08-05_818ef5d79e35499af31cd1b36fbda8fa_elex_wannacry
- Size 60KB
- Sample260805-rdatnatvbv
- SHA256 4570bac1e5a8c14ac5d8630cd435b0d634fede58746e45bac72a20418e37b057
- MD5 818ef5d79e35499af31cd1b36fbda8fa
- SHA1 426d3f4c7b8e7cd21fb2cb6d15ca1da61ea52982
- SHA512 4b72909d94042335ffee080d4e31700542f5c98456a6b8a87f040a98b75da4e3a286e950427b5fe32621b7da42a474c399bbf721480c4905c0af135336c0b317
- SSDEEP 192:pbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwDY04/CFxyNhoy5t:pbLwOs8AHsc4sMfwhKQLroF4/CFsrd
- TLSH T13E5308834BDE5CF2F791113108798AB9927B99D4950EBEDFBF90CD150037292E53A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-05_818ef5d79e35499af31cd1b36fbda8fa_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_818ef5d79e35499af31cd1b36fbda8fa_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_818ef5d79e35499af31cd1b36fbda8fa_elex_wannacry
- Size 60KB
- SHA256 4570bac1e5a8c14ac5d8630cd435b0d634fede58746e45bac72a20418e37b057
- MD5 818ef5d79e35499af31cd1b36fbda8fa
- SHA1 426d3f4c7b8e7cd21fb2cb6d15ca1da61ea52982
- SHA512 4b72909d94042335ffee080d4e31700542f5c98456a6b8a87f040a98b75da4e3a286e950427b5fe32621b7da42a474c399bbf721480c4905c0af135336c0b317
- SSDEEP 192:pbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwDY04/CFxyNhoy5t:pbLwOs8AHsc4sMfwhKQLroF4/CFsrd
- TLSH T13E5308834BDE5CF2F791113108798AB9927B99D4950EBEDFBF90CD150037292E53A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE