General
- Target 2026-08-09_314d99d6ef3cabc28af5b0ab64982ade_elex_wannacry
- Size 303KB
- Sample260809-mb868ayzh1
- SHA256 b5a0bc6e4fe5ef8facd0ea9f2de5f298a65cbfc6294461112e4a4e0b6488558e
- MD5 314d99d6ef3cabc28af5b0ab64982ade
- SHA1 73cfa78bc079738033c994d54ba85fd0fe8ecb74
- SHA512 5f1a08144cd4611acceff1c11ee55e81e64e9751ef884dc9b90f14c2af409c9ad6a9cfcf7343d9999e0049ccb9f1bd477f58ce35ec3646e9c3a2555435098681
- SSDEEP 6144:88BrRx0EhgrRil1gLEf0/+IVf9x+BH62FAsw3mO:tl0olGLJxV9QQ2FdSm
- TLSH T11D64CE50FBE18075E25A01780D6ADB6B5A1C7E340BE19CD3B3C10E5B247A9D3D936A3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_314d99d6ef3cabc28af5b0ab64982ade_elex_wannacry.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_314d99d6ef3cabc28af5b0ab64982ade_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_314d99d6ef3cabc28af5b0ab64982ade_elex_wannacry
- Size 303KB
- SHA256 b5a0bc6e4fe5ef8facd0ea9f2de5f298a65cbfc6294461112e4a4e0b6488558e
- MD5 314d99d6ef3cabc28af5b0ab64982ade
- SHA1 73cfa78bc079738033c994d54ba85fd0fe8ecb74
- SHA512 5f1a08144cd4611acceff1c11ee55e81e64e9751ef884dc9b90f14c2af409c9ad6a9cfcf7343d9999e0049ccb9f1bd477f58ce35ec3646e9c3a2555435098681
- SSDEEP 6144:88BrRx0EhgrRil1gLEf0/+IVf9x+BH62FAsw3mO:tl0olGLJxV9QQ2FdSm
- TLSH T11D64CE50FBE18075E25A01780D6ADB6B5A1C7E340BE19CD3B3C10E5B247A9D3D936A3B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Adds policy Run key to start application
-
Drops file in Drivers directory
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
-
Drops file in System32 directory