2026-08-07_52217637b4f04ddd0b98d98580b52fc5_elex_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-07_52217637b4f04ddd0b98d98580b52fc5_elex_wannacry
Size 661KB
Sample260807-egh8zsxarg
SHA256 ecda7411c70952babe582c2dcc3c9460edb929ceecdb4b22d11870dcc22c7eb1
MD5 52217637b4f04ddd0b98d98580b52fc5
SHA1 138239a463882aaf3d13c9a15d424075087b4cfa
SHA512 ba528d2b073b68401cff0850c7442e7e7bdc19b84debc2fa8e3421195169bbdc6b25522541b14cc3cd24a358a5e87abcf57be46d4ae4384738a6802fb842d258
SSDEEP 12288:sHuky/XwGexPj1tC5VKwYe3rKnGXVghaOl0olGLJxV9QQ2FdSm:sOkRTPxQ5VVras2aOlTlGLtSQiB
TLSH
T15DE4D051BBA1C0B5D26641344D6AC7AA5A297F354AF09CD7B3C20E4B347B983C93273B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-07_52217637b4f04ddd0b98d98580b52fc5_elex_wannacry

File Explorer

2026-08-07_52217637b4f04ddd0b98d98580b52fc5_elex_wannacry

.exe 661KB

2026-08-07_52217637b4f04ddd0b98d98580b52fc5_elex_wannacry

IMPHASH 55b5ac32e9fc82c490801e328fb786e0
SHA256 ecda7411c70952babe582c2dcc3c9460edb929ceecdb4b22d11870dcc22c7eb1
MD5 52217637b4f04ddd0b98d98580b52fc5
SHA1 138239a463882aaf3d13c9a15d424075087b4cfa
SHA512 ba528d2b073b68401cff0850c7442e7e7bdc19b84debc2fa8e3421195169bbdc6b25522541b14cc3cd24a358a5e87abcf57be46d4ae4384738a6802fb842d258
SSDEEP 12288:sHuky/XwGexPj1tC5VKwYe3rKnGXVghaOl0olGLJxV9QQ2FdSm:sOkRTPxQ5VVras2aOlTlGLtSQiB
TLSH
T15DE4D051BBA1C0B5D26641344D6AC7AA5A297F354AF09CD7B3C20E4B347B983C93273B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

44550

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileAttributesW FindNextFileW DeleteFileW SetFileAttributesW CopyFileW CreateDirectoryW GetSystemTimeAsFileTime GetModuleHandleW WaitForSingleObject lstrcpynW GetStdHandle CloseHandle ResetEvent WaitForMultipleObjects SetEvent OpenProcess GetVolumeNameForVolumeMountPointW DuplicateHandle GetCurrentProcess GetModuleHandleA WriteConsoleW WideCharToMultiByte WriteFile GetFileType GetConsoleMode Sleep InterlockedCompareExchange InterlockedExchange LocalFree LocalAlloc GetLocaleInfoA lstrcpyW VirtualProtect lstrcmpiW lstrlenW GetProcAddress FreeLibrary GetSystemDirectoryW LoadLibraryW FileTimeToSystemTime lstrcatW GetCommandLineA ReleaseMutex GetStartupInfoA

user32

CharNextW UpdateWindow SetDlgItemTextW GetParent PostMessageW wsprintfW LoadStringW BroadcastSystemMessageW GetWindowThreadProcessId CheckRadioButton

advapi32

RegCloseKey RegDeleteValueW CreateProcessAsUserW RegEnumKeyExW RegEnumKeyW RegCreateKeyExW RegQueryInfoKeyW RegEnumValueW RegDeleteKeyW RegOpenKeyExW RegSetValueExW RegQueryValueExW ReportEventW RegisterEventSourceW IsValidSecurityDescriptor SetSecurityDescriptorDacl AddAccessAllowedAceEx RegSetKeySecurity AddAce EqualSid GetAce DeregisterEventSource

rpcrt4

RpcStringFreeW RpcRevertToSelf RpcImpersonateClient UuidEqual UuidToStringW

msvcrt

_controlfp __set_app_type __p__fmode __p__commode __setusermatherr _initterm __getmainargs _acmdln _exit wcschr wcscmp _wcsicmp memset malloc free _except_handler3 _adjust_fdiv _amsg_exit _cexit exit _XcptFilter tolower _wfullpath towupper memcpy

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-07_52217637b4f04ddd0b98d98580b52fc5_elex_wannacry

kernel32

user32

advapi32

rpcrt4

msvcrt

generic