Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
08/08/2026, 10:43
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_cbb940043f07aba852bf4eb9d4eac606_elex_wannacry.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_cbb940043f07aba852bf4eb9d4eac606_elex_wannacry.exe
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
General
- Target 2026-08-08_cbb940043f07aba852bf4eb9d4eac606_elex_wannacry.exe
- Size 32.7MB
- Sample260808-mshetsvfkd
- SHA256 095c6c0f5b4bfa6d2609ae90d26e184510cb5a24b7644a4fb62ab7a6f9e7b2dc
- MD5 cbb940043f07aba852bf4eb9d4eac606
- SHA1 8ebf1269940cceb7bc2dba5b538400886c5c177e
- SHA512 c44f9fdab909d45b79601f04817a4c01ed196a7fab7761ea8b8fca779873d05de0558fc9eb3bdf3be29d9345b99cd0ca9905e96206dba0e571c58eedf891fdd8
- SSDEEP 786432:dPeiWXnXNLAWwtpBdvAdk5/VbwYd9ldYtyweu9Ix9h:dBcXNLwv+k5/Vbwc9fY4Zgo9h
- TLSH T188773351FFF38AB3F443B23006D85BBA12B6DB1294C6934BE2854F9D6D15B91DA32324
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_cbb940043f07aba852bf4eb9d4eac606_elex_wannacry.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1212 2026-08-08_cbb940043f07aba852bf4eb9d4eac606_elex_wannacry.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_cbb940043f07aba852bf4eb9d4eac606_elex_wannacry.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-08_cbb940043f07aba852bf4eb9d4eac606_elex_wannacry.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
PID:1212
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\bin\bzgrep
- Size 3KB
- SHA256 d8472a3d6d1566263ed7f01d27ff75706a185155db5f42f1d9dae33480dd3d37
- MD5 2b11565d85da178b3a1942a22d20c624
- SHA1 949324a4d8ef529369c3d910a6cf001f562d07fd
- SHA512 b14eb4c15b60505db7dc5c87c276e1853de95bb352d9c50a330dea86edb4caf5f0a6f9fcb1b0567feb6337c42315906767ec25faaf894c5ec283a3470f8e955a
- TLSH T175716210E14D8F74162410E53E8560DAB12AE63F11CF9C26F9CFE63E7B21A6261F76E4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\bin\bzip2.exe
- Size 50KB
- SHA256 583ecc0b0bbe3adbfa2d87019e0b9ab052d6e2dd5ef273548dd38851bd6bad64
- MD5 64a2d31cc81de19c32fe549069940f8e
- SHA1 f67580baccbb474016af24916b6da5012d8d6ae9
- SHA512 2c07a70fd9715b003c2998d3f301fbd7d411a26fbd7f4756a305bb9176bea1cbcbc9f7aaa60a11b9e7464816fa260d6cad10b76615465e1fee1e5070ca845f8a
- SSDEEP 768:koWNWoqjN/s//t/8ZzIFM1VEu1IS4SCA7D8ExyP1H9oTjYIpHRh/06LPQ0ruMInU:7WooOdgV/uVEL3N7EAPHYjYk8GfSMQrg
- TLSH T167333A0BFEDBC4F5F81728B408AFEA6F9776B4158410CD88FB0D1A1A9B3389A351D251
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\bin\mac2unix.exe
- Size 83KB
- SHA256 2a649ea8a2267e08be71e4c94c11ebf7485f820f7e1dff0b40191ad0978e8beb
- MD5 513a8c26e066205ad737f2c92ba98913
- SHA1 19a1cefca4bc221bc5bf3c03a761e4de592466ef
- SHA512 68ca9df37dfdddf9c5162f005ddd690449ba8a81f9640347b771489dba8fb1bbb140f46f81e235925e413d5961b06dfe6130d4feb3dcf6214beae323f273b3fa
- SSDEEP 1536:AjZ1+bSwO9I2PVFOUPq2KIYzDYqcEr9t9K/0gKnqG9g27n:QZIbSwOxpPq28DrP9K/vKqG9T7n
- TLSH T180833B4EFA8786F0E9AB4BB1468BE63FCA60BD12C460EF55FF1D7A49B6734416441E00
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\bin\mingw32-gcc.exe
- Size 2.1MB
- SHA256 35367e8caea8bc5a95aa35d53ccf80941bb16f667e059cb607f12f1065619da8
- MD5 2254b3a4492b8766eb7a562c8ca4302a
- SHA1 853ede0ba6dcd4de94242266cc5ac48f3f2a877b
- SHA512 602a1f4ddff7f46e2b265c2ff608ab289cce18f41dc94d61408f949135faf4a525bdecdca3f5f2332565c9832bd42a97cadf1dfae94b2a8fa4ad8e586ca386c8
- SSDEEP 49152:Tegf++cSUzAAUmCIBJBAUZLYwiO6UpGaXBuQQ9uDf:TeQ++cSU8AF7BAUZL2Ml
- TLSH T190A59D54FA53ADF2F96384B4459ED3BF9230FC0189219E73FB493A4DBD336680568289
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\bin\unix2mac.exe
- Size 83KB
- SHA256 6c677cc9671cb21b3ce0c395996ed9a142427a3036cf97ee1c8aa0383de605d0
- MD5 b272bbfab491555cae94740cf23489f1
- SHA1 7dec1b4d7dfd366c900e823ac47be93df2b00ab2
- SHA512 2e495e07715aceb779c5e7ab0a67ad6771326b22dbe8ad2390fcf672bc167e6f82dccdf88f953470813b3113adf2719bc54ed33f93fb7c2d8da511927071e26c
- SSDEEP 1536:xq8CNOOlaGyiIW7X7FOUPq2KAI9QXqcHo/r3jP7HzfLXDvbnT/r3jP7HzfLXDvbG:ZCNTlaGyozPq22Qvo/r3jP7HzfLXDvbG
- TLSH T1A383190FB94785F1EAA747B149DBE27FCB61AD12C820EF66FF1D7A09AA334415480B10
- MD5 SHA1 SHA512 SSDEEP TLSH