2026-08-09_17c8e139b5fd18a740075301ecf4d330_elex_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-09_17c8e139b5fd18a740075301ecf4d330_elex_wannacry
Size 77KB
Sample260809-merrcadn4t
SHA256 78de07cffab0042f649a93b14a1f7132e2d3deb2223f7724822f2f4973c372d4
MD5 17c8e139b5fd18a740075301ecf4d330
SHA1 0161afdd040283da5d6a0d4d94bc331554dd102b
SHA512 73c25eb659c0566ab3d73c4cccb20451b95e75cdc952f756c4136a2d532e56e9de5c3c205b939701f75ea1b12d6866c9368db3cc2e1ffadf71a2aac4b9fe0f83
SSDEEP 1536:6pH98P18VkxZ7RzREk0sN0j2HhrsaDj1+5Ril1gz8dAZEZ:889OeZ5RrN0SHhrsWqRil1gLE
TLSH
T1CA733B01F3C28166F69842F61C786E7B691D76B41BA1ACD3F3848F5804B96D3E93D21B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-09_17c8e139b5fd18a740075301ecf4d330_elex_wannacry

File Explorer

2026-08-09_17c8e139b5fd18a740075301ecf4d330_elex_wannacry

.exe 77KB

2026-08-09_17c8e139b5fd18a740075301ecf4d330_elex_wannacry

IMPHASH 05fd793c57a4f0ea18978126d7dc9783
SHA256 78de07cffab0042f649a93b14a1f7132e2d3deb2223f7724822f2f4973c372d4
MD5 17c8e139b5fd18a740075301ecf4d330
SHA1 0161afdd040283da5d6a0d4d94bc331554dd102b
SHA512 73c25eb659c0566ab3d73c4cccb20451b95e75cdc952f756c4136a2d532e56e9de5c3c205b939701f75ea1b12d6866c9368db3cc2e1ffadf71a2aac4b9fe0f83
SSDEEP 1536:6pH98P18VkxZ7RzREk0sN0j2HhrsaDj1+5Ril1gz8dAZEZ:889OeZ5RrN0SHhrsWqRil1gLE
TLSH
T1CA733B01F3C28166F69842F61C786E7B691D76B41BA1ACD3F3848F5804B96D3E93D21B
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

63546

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvcrt

_controlfp __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit _snwprintf wcscpy wcslen _errno fprintf swprintf getenv time _stricmp strchr _memicmp sprintf _snprintf fopen fwrite fclose _strlwr malloc free

ntdll

NtSetInformationProcess NtQueryInformationProcess

user32

GetSystemMetrics ReleaseDC GetDC GetCursorPos

advapi32

GetTokenInformation RegCreateKeyExA RegSetValueExA RegOpenCurrentUser RevertToSelf ImpersonateLoggedOnUser SetEntriesInAclA SetSecurityInfo LookupPrivilegeValueA AdjustTokenPrivileges CheckTokenMembership OpenProcessToken EqualSid RegEnumValueA RegEnumKeyA RegOpenKeyExA RegQueryValueExA RegCloseKey GetUserNameA OpenSCManagerA OpenServiceA QueryServiceStatus QueryServiceConfigA CloseServiceHandle ChangeServiceConfigA StartServiceA InitializeSecurityDescriptor AllocateAndInitializeSid GetLengthSid InitializeAcl AddAccessAllowedAce SetSecurityDescriptorDacl SetFileSecurityW FreeSid

ole32

CoInitialize CoUninitialize CoCreateInstance

shell32

ord680 SHGetSpecialFolderPathA

wininet

InternetSetOptionA InternetOpenA InternetConnectA HttpOpenRequestA HttpAddRequestHeadersA HttpSendRequestA HttpQueryInfoA InternetReadFile InternetCloseHandle

ws2_32

WSACleanup WSAStartup

gdi32

GetDeviceCaps

iphlpapi

GetAdaptersInfo

kernel32

RtlUnwind GetStartupInfoA DeleteFileW VirtualAlloc VirtualFree QueryPerformanceCounter ProcessIdToSessionId OpenProcess DuplicateHandle LocalFree LoadLibraryA FreeLibrary GetSystemTimeAsFileTime VirtualProtect GetCurrentThreadId Module32First CreateToolhelp32Snapshot GetTickCount FindClose FindFirstFileA GetVolumeInformationA GetSystemDirectoryA GetVolumeNameForVolumeMountPointA GetFileAttributesA Process32First Sleep GetLastError GetVersion GetVersionExA VerifyVersionInfoA VerSetConditionMask GetCurrentProcess GetProcAddress GetModuleHandleA ExitThread FindNextFileA GetComputerNameA GetModuleFileNameA CloseHandle Process32Next ExitProcess Module32Next GetSystemInfo GlobalMemoryStatusEx GetDiskFreeSpaceExA FlushInstructionCache MoveFileExA CreateProcessA SetFileAttributesW GetTempPathA OpenMutexA GetCurrentProcessId IsBadReadPtr

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-09_17c8e139b5fd18a740075301ecf4d330_elex_wannacry

msvcrt

ntdll

user32

advapi32

ole32

shell32

wininet

ws2_32

gdi32

iphlpapi

kernel32

generic