General
- Target 2026-08-08_dc989d80e3c693ac966aa0d5e07d7fd6_elex_wannacry
- Size 87KB
- Sample260808-c21yesgj7s
- SHA256 22891b3f0c5d9e3afdbf1c524924b145f6d47239a481607166b8352004334713
- MD5 dc989d80e3c693ac966aa0d5e07d7fd6
- SHA1 a4fd4fa946bde22a794a011cbe603bfdbebbd9a5
- SHA512 8f6b274032b2af113bf59c2ffcb99130882f9390e1af94e6dfdcfeafed716159a4c42a5d6014915b7e753010997eca5f3f714d13fce52da7f7e73276b26c66a5
- SSDEEP 384:5bLwOs8AHsc4sM6whKiroE4/CFsrdk5I1Nb7g7FX7XYfruVDtM9tQ/FKlnVwUUO1:5vw9816uhKiroE4/wQNNrfrunMxVFZ
- TLSH T1BF93843E8DC720B6E273C17685F925FAFF27654235499D0E45C2C3424E63AA3AC86D1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-08_dc989d80e3c693ac966aa0d5e07d7fd6_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_dc989d80e3c693ac966aa0d5e07d7fd6_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_dc989d80e3c693ac966aa0d5e07d7fd6_elex_wannacry
- Size 87KB
- SHA256 22891b3f0c5d9e3afdbf1c524924b145f6d47239a481607166b8352004334713
- MD5 dc989d80e3c693ac966aa0d5e07d7fd6
- SHA1 a4fd4fa946bde22a794a011cbe603bfdbebbd9a5
- SHA512 8f6b274032b2af113bf59c2ffcb99130882f9390e1af94e6dfdcfeafed716159a4c42a5d6014915b7e753010997eca5f3f714d13fce52da7f7e73276b26c66a5
- SSDEEP 384:5bLwOs8AHsc4sM6whKiroE4/CFsrdk5I1Nb7g7FX7XYfruVDtM9tQ/FKlnVwUUO1:5vw9816uhKiroE4/wQNNrfrunMxVFZ
- TLSH T1BF93843E8DC720B6E273C17685F925FAFF27654235499D0E45C2C3424E63AA3AC86D1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE