General
- Target 2026-08-06_b8e8c5ee1dc58d8a00816a37e4302a27_elex_wannacry
- Size 60KB
- Sample260806-sc5hbatepf
- SHA256 bcd1f8b56ed277bdee877aeeda0524eada19e78c936a1667b784f93ef68a52e6
- MD5 b8e8c5ee1dc58d8a00816a37e4302a27
- SHA1 d54ddc7f78bc7cc8db2a3a1f431b1db45577cf47
- SHA512 fa19bb519d0dfd162b9e89df95c758ca0396a269abc5078dc0760e0ae23a73489d34968ff5bbdcdf39a7d7b9a43537d6e94c9186c802f5b3760bdaeaab2f45e0
- SSDEEP 192:XbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqw8Y04/CFxyNhoy5t:XbLwOs8AHsc4sMfwhKQLroK4/CFsrd
- TLSH T10C5309834BDE9CF2F791123118794AB9927B9AC4910EBE9FBF90CD550037692E53E10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-06_b8e8c5ee1dc58d8a00816a37e4302a27_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_b8e8c5ee1dc58d8a00816a37e4302a27_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_b8e8c5ee1dc58d8a00816a37e4302a27_elex_wannacry
- Size 60KB
- SHA256 bcd1f8b56ed277bdee877aeeda0524eada19e78c936a1667b784f93ef68a52e6
- MD5 b8e8c5ee1dc58d8a00816a37e4302a27
- SHA1 d54ddc7f78bc7cc8db2a3a1f431b1db45577cf47
- SHA512 fa19bb519d0dfd162b9e89df95c758ca0396a269abc5078dc0760e0ae23a73489d34968ff5bbdcdf39a7d7b9a43537d6e94c9186c802f5b3760bdaeaab2f45e0
- SSDEEP 192:XbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqw8Y04/CFxyNhoy5t:XbLwOs8AHsc4sMfwhKQLroK4/CFsrd
- TLSH T10C5309834BDE9CF2F791123118794AB9927B9AC4910EBE9FBF90CD550037692E53E10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE