General
- Target 2026-08-09_29085ed0659db3e1a08dfd9db6abdd30_elex_wannacry
- Size 404KB
- Sample260809-yrbrfavela
- SHA256 1ff5aec6c4b1da84745addfd38949f5e970842e0212b203be345b1d096a2edb3
- MD5 29085ed0659db3e1a08dfd9db6abdd30
- SHA1 15c91c69f8fd36840763a05488847ef9188d41cd
- SHA512 4abb3df9254c4f814c31e4f254692e1d1dc84d8dd24758307deec498ec1d25d3274dfad4fa76adc113480ef20eaecaea320a82e3938e08623bac0928dbdc35a9
- SSDEEP 6144:Z+0dSwwT4TFr9hA0t7LPUUht7W3GJ6lwc/uop1Y7:Z+14t9hBPUUhteI6yc/fY
- TLSH T15A949E483BAA9EA8E7675333CA6CC565179D2F228DD749363084739F1E31F81EEC5221
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_29085ed0659db3e1a08dfd9db6abdd30_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_29085ed0659db3e1a08dfd9db6abdd30_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_29085ed0659db3e1a08dfd9db6abdd30_elex_wannacry
- Size 404KB
- SHA256 1ff5aec6c4b1da84745addfd38949f5e970842e0212b203be345b1d096a2edb3
- MD5 29085ed0659db3e1a08dfd9db6abdd30
- SHA1 15c91c69f8fd36840763a05488847ef9188d41cd
- SHA512 4abb3df9254c4f814c31e4f254692e1d1dc84d8dd24758307deec498ec1d25d3274dfad4fa76adc113480ef20eaecaea320a82e3938e08623bac0928dbdc35a9
- SSDEEP 6144:Z+0dSwwT4TFr9hA0t7LPUUht7W3GJ6lwc/uop1Y7:Z+14t9hBPUUhteI6yc/fY
- TLSH T15A949E483BAA9EA8E7675333CA6CC565179D2F228DD749363084739F1E31F81EEC5221
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.