General
- Target 2026-08-05_17a80b8856008aed00431e2a63df1988_elex_wannacry
- Size 404KB
- Sample260805-xvsnpaztg1
- SHA256 d6f1d85ca9e116def525b84d32117f2d4bd1fe4147cb97950a7678bad2384c95
- MD5 17a80b8856008aed00431e2a63df1988
- SHA1 8618a197c6195937f3449b8d10ff4fd290a70e44
- SHA512 dfe6c925b78566afd881f621289aa115cdd7a64158faa3e6781f1063e379b72951d1db4d5a4a5d2e6a9400c7b425cbdf30845bc12d376293fadcb078008e8a58
- SSDEEP 3072:QoVDjW0LjYVof9/GSIAVbJBr0qEiwvt1DMPomdaCH8vCCe0ESsM0yB5l0DIAd2zh:Z+03Y2hVltY3DMPotCHbB+0yBfeID
- TLSH T1D9948CEF26D19465EA9213F0CDAD81A71321ADA68DEF1EFE5290B34ECD3D6C1BD05201
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_17a80b8856008aed00431e2a63df1988_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_17a80b8856008aed00431e2a63df1988_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_17a80b8856008aed00431e2a63df1988_elex_wannacry
- Size 404KB
- SHA256 d6f1d85ca9e116def525b84d32117f2d4bd1fe4147cb97950a7678bad2384c95
- MD5 17a80b8856008aed00431e2a63df1988
- SHA1 8618a197c6195937f3449b8d10ff4fd290a70e44
- SHA512 dfe6c925b78566afd881f621289aa115cdd7a64158faa3e6781f1063e379b72951d1db4d5a4a5d2e6a9400c7b425cbdf30845bc12d376293fadcb078008e8a58
- SSDEEP 3072:QoVDjW0LjYVof9/GSIAVbJBr0qEiwvt1DMPomdaCH8vCCe0ESsM0yB5l0DIAd2zh:Z+03Y2hVltY3DMPotCHbB+0yBfeID
- TLSH T1D9948CEF26D19465EA9213F0CDAD81A71321ADA68DEF1EFE5290B34ECD3D6C1BD05201
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.