General

  • Target
    2026-08-09_314d99d6ef3cabc28af5b0ab64982ade_elex_wannacry
  • Size 303KB
  • Sample260809-mb868ayzh1
  • SHA256 b5a0bc6e4fe5ef8facd0ea9f2de5f298a65cbfc6294461112e4a4e0b6488558e
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-08-09_314d99d6ef3cabc28af5b0ab64982ade_elex_wannacry
    • Size 303KB
    • SHA256 b5a0bc6e4fe5ef8facd0ea9f2de5f298a65cbfc6294461112e4a4e0b6488558e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Adds policy Run key to start application

    • Drops file in Drivers directory

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Checks whether UAC is enabled

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks