General
- Target 2026-08-08_0189429244bd9f4f22ef42c1d1f03d56_elex_wannacry
- Size 64KB
- Sample260809-aqawraxckb
- SHA256 a85fe8bd7dc77e0ab57e3efc0997e79ceabcaa3d78b8c520c95edc6d3179affe
- MD5 0189429244bd9f4f22ef42c1d1f03d56
- SHA1 b59610b819c8445c12ff477d1b5a000d26141db7
- SHA512 36f98185b707f06ce9a8512b55629ce1e9b5ccede7604b6e64e7665b74ac6e29edc99ab42800e30ca9352b4f025b9607594edf24d763c14c650e882905b2b72e
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLrog4/CFsrdn0A9lsy4:vvw9816vhKQLrog4/wQH9lsl
- TLSH T146535C834BEE98F2F7D21131056D8AB98277ADC4961EBEAF7F50CE54007B191D83A14B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-08_0189429244bd9f4f22ef42c1d1f03d56_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_0189429244bd9f4f22ef42c1d1f03d56_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_0189429244bd9f4f22ef42c1d1f03d56_elex_wannacry
- Size 64KB
- SHA256 a85fe8bd7dc77e0ab57e3efc0997e79ceabcaa3d78b8c520c95edc6d3179affe
- MD5 0189429244bd9f4f22ef42c1d1f03d56
- SHA1 b59610b819c8445c12ff477d1b5a000d26141db7
- SHA512 36f98185b707f06ce9a8512b55629ce1e9b5ccede7604b6e64e7665b74ac6e29edc99ab42800e30ca9352b4f025b9607594edf24d763c14c650e882905b2b72e
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLrog4/CFsrdn0A9lsy4:vvw9816vhKQLrog4/wQH9lsl
- TLSH T146535C834BEE98F2F7D21131056D8AB98277ADC4961EBEAF7F50CE54007B191D83A14B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE