2026-08-09_ef3470d9d3bfe7484623f783d984c007_elex_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-09_ef3470d9d3bfe7484623f783d984c007_elex_wannacry
Size 576KB
Sample260809-lpmdyavelb
SHA256 0ee04b9efe26b87137e5ec67789558fe18420d5682ca1515cea9fdecfa254cc6
MD5 ef3470d9d3bfe7484623f783d984c007
SHA1 74227b53250977dfe1b7b12f9c41e64649a736bb
SHA512 8d9a4bdd8438c24ffde9c6a474a19467eb9c420eb26b38cbdcfe512de0888fb15d914d1606ee582348d94d05dd429a09e3bf82e7f861f06afb1f5efb2f7a4125
SSDEEP 12288:sHuky/XwGexPj1tC5VKwYe3rKnGXVghaOl0olGLJxV9Qk:sOkRTPxQ5VVras2aOlTlGLtSk
TLSH
T191C4DF51BBA1C0B5D36641704D6DC7AA8A197F3556F09CE3B3C20E4B347B993CA2263B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-09_ef3470d9d3bfe7484623f783d984c007_elex_wannacry

File Explorer

2026-08-09_ef3470d9d3bfe7484623f783d984c007_elex_wannacry

.exe 576KB

2026-08-09_ef3470d9d3bfe7484623f783d984c007_elex_wannacry

IMPHASH 55b5ac32e9fc82c490801e328fb786e0
SHA256 0ee04b9efe26b87137e5ec67789558fe18420d5682ca1515cea9fdecfa254cc6
MD5 ef3470d9d3bfe7484623f783d984c007
SHA1 74227b53250977dfe1b7b12f9c41e64649a736bb
SHA512 8d9a4bdd8438c24ffde9c6a474a19467eb9c420eb26b38cbdcfe512de0888fb15d914d1606ee582348d94d05dd429a09e3bf82e7f861f06afb1f5efb2f7a4125
SSDEEP 12288:sHuky/XwGexPj1tC5VKwYe3rKnGXVghaOl0olGLJxV9Qk:sOkRTPxQ5VVras2aOlTlGLtSk
TLSH
T191C4DF51BBA1C0B5D36641704D6DC7AA8A197F3556F09CE3B3C20E4B347B993CA2263B
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

44550

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileAttributesW FindNextFileW DeleteFileW SetFileAttributesW CopyFileW CreateDirectoryW GetSystemTimeAsFileTime GetModuleHandleW WaitForSingleObject lstrcpynW GetStdHandle CloseHandle ResetEvent WaitForMultipleObjects SetEvent OpenProcess GetVolumeNameForVolumeMountPointW DuplicateHandle GetCurrentProcess GetModuleHandleA WriteConsoleW WideCharToMultiByte WriteFile GetFileType GetConsoleMode Sleep InterlockedCompareExchange InterlockedExchange LocalFree LocalAlloc GetLocaleInfoA lstrcpyW VirtualProtect lstrcmpiW lstrlenW GetProcAddress FreeLibrary GetSystemDirectoryW LoadLibraryW FileTimeToSystemTime lstrcatW GetCommandLineA ReleaseMutex GetStartupInfoA

user32

CharNextW UpdateWindow SetDlgItemTextW GetParent PostMessageW wsprintfW LoadStringW BroadcastSystemMessageW GetWindowThreadProcessId CheckRadioButton

advapi32

RegCloseKey RegDeleteValueW CreateProcessAsUserW RegEnumKeyExW RegEnumKeyW RegCreateKeyExW RegQueryInfoKeyW RegEnumValueW RegDeleteKeyW RegOpenKeyExW RegSetValueExW RegQueryValueExW ReportEventW RegisterEventSourceW IsValidSecurityDescriptor SetSecurityDescriptorDacl AddAccessAllowedAceEx RegSetKeySecurity AddAce EqualSid GetAce DeregisterEventSource

rpcrt4

RpcStringFreeW RpcRevertToSelf RpcImpersonateClient UuidEqual UuidToStringW

msvcrt

_controlfp __set_app_type __p__fmode __p__commode __setusermatherr _initterm __getmainargs _acmdln _exit wcschr wcscmp _wcsicmp memset malloc free _except_handler3 _adjust_fdiv _amsg_exit _cexit exit _XcptFilter tolower _wfullpath towupper memcpy

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-09_ef3470d9d3bfe7484623f783d984c007_elex_wannacry

kernel32

user32

advapi32

rpcrt4

msvcrt

generic