General
- Target 2026-08-09_b06fbeb815627113ab84662f05943ce9_elex_wannacry
- Size 110KB
- Sample260809-wxm1jstbra
- SHA256 6a810a621033a8c271c0c20b1bf1bc62576dc1a9d6367f709333f37bb8170a00
- MD5 b06fbeb815627113ab84662f05943ce9
- SHA1 927041e9b0e68f0da40bece410c11949194bf5e9
- SHA512 5742cdb765631cba9740db8b3df53c913617832b3a6d3e414d7dcdc9106fe315abf4dc028ca362a2f7c2bc3d2ebdfbacfc6cb3d8b86b924824ca9762c21841aa
- SSDEEP 3072:qu3hWaTJ213xiPD9FKpPojqGOALw2WTqeHElUGbn08+XjP:q7achuFCMqGOAUD/Elv08+XjP
- TLSH T10CB30286B24EBCB4D58300B674A60C9296BBDD341B05BCA3CB4B107D3961ECF35B538A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_b06fbeb815627113ab84662f05943ce9_elex_wannacry.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_b06fbeb815627113ab84662f05943ce9_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_b06fbeb815627113ab84662f05943ce9_elex_wannacry
- Size 110KB
- SHA256 6a810a621033a8c271c0c20b1bf1bc62576dc1a9d6367f709333f37bb8170a00
- MD5 b06fbeb815627113ab84662f05943ce9
- SHA1 927041e9b0e68f0da40bece410c11949194bf5e9
- SHA512 5742cdb765631cba9740db8b3df53c913617832b3a6d3e414d7dcdc9106fe315abf4dc028ca362a2f7c2bc3d2ebdfbacfc6cb3d8b86b924824ca9762c21841aa
- SSDEEP 3072:qu3hWaTJ213xiPD9FKpPojqGOALw2WTqeHElUGbn08+XjP:q7achuFCMqGOAUD/Elv08+XjP
- TLSH T10CB30286B24EBCB4D58300B674A60C9296BBDD341B05BCA3CB4B107D3961ECF35B538A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Drops file in Drivers directory
-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Create or Modify System Process
1Windows Service
1