2026-08-09_f83457823e1211a355c36df794c2f48f_elex_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-09_f83457823e1211a355c36df794c2f48f_elex_wannacry
Size 20.1MB
Sample260809-kylnbsthpe
SHA256 7d6fc4b08d23d16c064cc86ddb58ffa49b744a4a5eac6e9743b8ac92388e5ecf
MD5 f83457823e1211a355c36df794c2f48f
SHA1 ac4ad437074a54faa5fb674858fbcb69094c59d5
SHA512 459a3ba3b8e16b3ea72594c652f949dc05dac9d842665eee16a8de062ffa28f3540d4b15139f0493bc2ef6052379bc3dbe33e2b8f8e3757119863f2379cd2142
SSDEEP 393216:HFM7sUvvnh5Ys7YTvvtgx9ooC7APPlBWNANORlqbhMQzP6JylAZRCE7:svnAs8zlSuAi+lhTL6JYAL7
TLSH
T156273361B04041D9E22F547BD7E82C5AC97C3A0B90D5889E26C86B613CE8FDD9D43B6F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-09_f83457823e1211a355c36df794c2f48f_elex_wannacry

File Explorer

2026-08-09_f83457823e1211a355c36df794c2f48f_elex_wannacry

.exe 20.1MB

2026-08-09_f83457823e1211a355c36df794c2f48f_elex_wannacry

IMPHASH 32569d67dc210c5cb9a759b08da2bdb3
SHA256 7d6fc4b08d23d16c064cc86ddb58ffa49b744a4a5eac6e9743b8ac92388e5ecf
MD5 f83457823e1211a355c36df794c2f48f
SHA1 ac4ad437074a54faa5fb674858fbcb69094c59d5
SHA512 459a3ba3b8e16b3ea72594c652f949dc05dac9d842665eee16a8de062ffa28f3540d4b15139f0493bc2ef6052379bc3dbe33e2b8f8e3757119863f2379cd2142
SSDEEP 393216:HFM7sUvvnh5Ys7YTvvtgx9ooC7APPlBWNANORlqbhMQzP6JylAZRCE7:svnAs8zlSuAi+lhTL6JYAL7
TLSH
T156273361B04041D9E22F547BD7E82C5AC97C3A0B90D5889E26C86B613CE8FDD9D43B6F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

102636

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

oleaut32

SysStringLen SysAllocStringLen VariantClear

user32

DialogBoxParamW SetWindowLongW GetWindowLongW GetDlgItem LoadStringW CharUpperW DestroyWindow EndDialog PostMessageW SetWindowTextW ShowWindow MessageBoxW SendMessageW LoadIconW KillTimer SetTimer

shell32

ShellExecuteExW

msvcrt

_controlfp __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit ?terminate@@YAXXZ ??1type_info@@UAE@XZ _except_handler3 _beginthreadex memset wcsstr free malloc memcpy _CxxThrowException _purecall memmove memcmp wcscmp __CxxFrameHandler

kernel32

WaitForSingleObject GetStartupInfoA InitializeCriticalSection ResetEvent SetEvent CreateEventW lstrlenW lstrcatW VirtualFree VirtualAlloc Sleep WaitForMultipleObjects GetFileInformationByHandle GetStdHandle GlobalMemoryStatus GetSystemInfo GetCurrentProcess GetProcessAffinityMask SetEndOfFile WriteFile ReadFile SetFilePointer GetFileSize GetFileAttributesW GetModuleHandleA FindNextFileW FindFirstFileW FindClose GetCurrentThreadId GetTickCount GetCurrentProcessId GetTempPathW GetCurrentDirectoryW SetCurrentDirectoryW SetLastError DeleteFileW CreateDirectoryW GetModuleHandleW GetProcAddress RemoveDirectoryW SetFileAttributesW CreateFileW SetFileTime GetSystemDirectoryW FormatMessageW LocalFree GetModuleFileNameW LoadLibraryExW DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError GetVersionExW GetCommandLineW CreateProcessW CloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-09_f83457823e1211a355c36df794c2f48f_elex_wannacry

oleaut32

user32

shell32

msvcrt

kernel32

generic