General
- Target 2026-08-07_2f6e26a49ec5045d35af8c8746ea4e80_elex_wannacry
- Size 268KB
- Sample260807-rmaj9afl9t
- SHA256 245e2b0d4eed646e604a7c44b28ba5216966eb1ee1a7c284177c1d24bc8c2f96
- MD5 2f6e26a49ec5045d35af8c8746ea4e80
- SHA1 7d148b82f3af151afaa1e420bc2631aebfea49bb
- SHA512 235090dbe1932331b571992116f618da20cd3a7c695c42af1d97889bcb69135e895941b826153ea4e53b9925f47e5a4730da845c7018e27ea8f1f73e72263208
- SSDEEP 1536:/GjuPg3YP4cdTEu+ECZZpjdDTq333333333333333333X:/GC43DkTv+XZZpj1T8
- TLSH T145443C15A7965A49DC26273160030B3BDBF6181A70BE633758B1DE0DBE742296F3B339
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_2f6e26a49ec5045d35af8c8746ea4e80_elex_wannacry.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_2f6e26a49ec5045d35af8c8746ea4e80_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_2f6e26a49ec5045d35af8c8746ea4e80_elex_wannacry
- Size 268KB
- SHA256 245e2b0d4eed646e604a7c44b28ba5216966eb1ee1a7c284177c1d24bc8c2f96
- MD5 2f6e26a49ec5045d35af8c8746ea4e80
- SHA1 7d148b82f3af151afaa1e420bc2631aebfea49bb
- SHA512 235090dbe1932331b571992116f618da20cd3a7c695c42af1d97889bcb69135e895941b826153ea4e53b9925f47e5a4730da845c7018e27ea8f1f73e72263208
- SSDEEP 1536:/GjuPg3YP4cdTEu+ECZZpjdDTq333333333333333333X:/GC43DkTv+XZZpj1T8
- TLSH T145443C15A7965A49DC26273160030B3BDBF6181A70BE633758B1DE0DBE742296F3B339
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of file extensions in Explorer
-
Disables RegEdit via registry modification
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Accesses Microsoft Outlook accounts
-
Drops file in System32 directory