General
- Target 2026-08-09_6b2f9b66d3a2b01cd3d21ce93bd05ae6_elex_wannacry
- Size 213KB
- Sample260809-t531maak6z
- SHA256 bae6f241b2b60edea1e2af77ff9390574183242f1d476dc4bfc4a14dc6bf7532
- MD5 6b2f9b66d3a2b01cd3d21ce93bd05ae6
- SHA1 67d1727660bd9c5adea68aab948ca0f60f6d93b9
- SHA512 e51f1e294c72e77330d8cf22c399d17ff154732391a19bc86a7fcb158040e86478d8c84a3ba3c2309d7d6dc5a0a1877f660c1da36f4063bd5cf2d3f6e30a4240
- SSDEEP 1536:YEGh0oNl2unMxVS3HgdoKjhLJhzrryLPAneS3DquFSS4efk6kF/y+Ic7e/FtPt+A:YEGh0oNlvMUyNjhLJhXrhnJ3D4IF
- TLSH T16624DB1A3ADE242AD777F1F2DFF9C5ADEB22F6A691130E1F208243035911E915E06D39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-09_6b2f9b66d3a2b01cd3d21ce93bd05ae6_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_6b2f9b66d3a2b01cd3d21ce93bd05ae6_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_6b2f9b66d3a2b01cd3d21ce93bd05ae6_elex_wannacry
- Size 213KB
- SHA256 bae6f241b2b60edea1e2af77ff9390574183242f1d476dc4bfc4a14dc6bf7532
- MD5 6b2f9b66d3a2b01cd3d21ce93bd05ae6
- SHA1 67d1727660bd9c5adea68aab948ca0f60f6d93b9
- SHA512 e51f1e294c72e77330d8cf22c399d17ff154732391a19bc86a7fcb158040e86478d8c84a3ba3c2309d7d6dc5a0a1877f660c1da36f4063bd5cf2d3f6e30a4240
- SSDEEP 1536:YEGh0oNl2unMxVS3HgdoKjhLJhzrryLPAneS3DquFSS4efk6kF/y+Ic7e/FtPt+A:YEGh0oNlvMUyNjhLJhXrhnJ3D4IF
- TLSH T16624DB1A3ADE242AD777F1F2DFF9C5ADEB22F6A691130E1F208243035911E915E06D39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE