General
- Target 2026-08-06_ed397e1306ac65238d1567d61ece8668_elex_wannacry
- Size 404KB
- Sample260806-2c2abs1hpb
- SHA256 e0494231870613846913c70a0314f0ae463f3d5eb9c395892817e1f774c4155b
- MD5 ed397e1306ac65238d1567d61ece8668
- SHA1 6add0eba7ecb89eeb52c7e4a5367711d9ac44557
- SHA512 c1e7709456014941f63959cfcc3cfa72f29ccbfe34d39c33aef341d993919602e75ad32121585716efba3ca492c2ee1f70ee505f070a8c17267551a864527131
- SSDEEP 3072:UoVDjW0LAIYO9YJqCpaSEnlO8P+VhKUWLOP7ijujl/WOHmAxaB0yAXtjeJli9UDW:d+075CPU+5qB6x/WwmAcB0/t
- TLSH T166949DBA7861D89FD951027CFF5ACEF46F32BD1DEC64A6062994B38D5E346420E32309
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_ed397e1306ac65238d1567d61ece8668_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_ed397e1306ac65238d1567d61ece8668_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_ed397e1306ac65238d1567d61ece8668_elex_wannacry
- Size 404KB
- SHA256 e0494231870613846913c70a0314f0ae463f3d5eb9c395892817e1f774c4155b
- MD5 ed397e1306ac65238d1567d61ece8668
- SHA1 6add0eba7ecb89eeb52c7e4a5367711d9ac44557
- SHA512 c1e7709456014941f63959cfcc3cfa72f29ccbfe34d39c33aef341d993919602e75ad32121585716efba3ca492c2ee1f70ee505f070a8c17267551a864527131
- SSDEEP 3072:UoVDjW0LAIYO9YJqCpaSEnlO8P+VhKUWLOP7ijujl/WOHmAxaB0yAXtjeJli9UDW:d+075CPU+5qB6x/WwmAcB0/t
- TLSH T166949DBA7861D89FD951027CFF5ACEF46F32BD1DEC64A6062994B38D5E346420E32309
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.