General
- Target 2026-08-09_3c9971c43bbbf6c4c1ec17498a08f236_elex_wannacry
- Size 31KB
- Sample260809-vg9nyabe42
- SHA256 9199b34c2a324a53d192a04c32127e92288c6ec4af4c0d53e74856600d00717f
- MD5 3c9971c43bbbf6c4c1ec17498a08f236
- SHA1 877ce861746b8332c901f444c3dd617296e063ef
- SHA512 4239378f930e1896ab662067824100deb370c7dba4da9d055728b791dc328cdea35d1e6e2ee122eb981c74e0f7303b08a1eb64d4de76ba5c418d3392f64328a2
- SSDEEP 192:uTq5WckBezHYQRPK6k7TjHwCl1oynzc2Fjmf2mrETLLC0qmAKLCAYV7/mjmTUsIe:uTKWckBeEd6ml1pcg7eMUUz624
- TLSH T1DAE273346BE45D73E3BBDBB586F7C1C5A975742A2E03992E80451B881C33B11DCA0F99
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-09_3c9971c43bbbf6c4c1ec17498a08f236_elex_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_3c9971c43bbbf6c4c1ec17498a08f236_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_3c9971c43bbbf6c4c1ec17498a08f236_elex_wannacry
- Size 31KB
- SHA256 9199b34c2a324a53d192a04c32127e92288c6ec4af4c0d53e74856600d00717f
- MD5 3c9971c43bbbf6c4c1ec17498a08f236
- SHA1 877ce861746b8332c901f444c3dd617296e063ef
- SHA512 4239378f930e1896ab662067824100deb370c7dba4da9d055728b791dc328cdea35d1e6e2ee122eb981c74e0f7303b08a1eb64d4de76ba5c418d3392f64328a2
- SSDEEP 192:uTq5WckBezHYQRPK6k7TjHwCl1oynzc2Fjmf2mrETLLC0qmAKLCAYV7/mjmTUsIe:uTKWckBeEd6ml1pcg7eMUUz624
- TLSH T1DAE273346BE45D73E3BBDBB586F7C1C5A975742A2E03992E80451B881C33B11DCA0F99
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Waski payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE