General
- Target 2026-08-10_56984217a98bfc0649b1abfa26e26237_elex_wannacry
- Size 633KB
- Sample260810-2f6dfsvxfx
- SHA256 5053f05d43f2a0a6f700ef9bbc13276654734c093b9e81ef3ffe68b7b6c77fe4
- MD5 56984217a98bfc0649b1abfa26e26237
- SHA1 7a785aa01cd65d8ea518f1b16f1f137f29914ab8
- SHA512 12d15d4a889c88b131b4b42f23a4d151166d7503754082fa869545bf07eb7629b78ec5661061b88e55361dcdc0a9e4727f956ceb191b17f2ffc7adf344fda2ea
- SSDEEP 12288:pGruf026ZlmR70Y/k9VS+L9MR2iefZ9GHO3d0s:Uuf0XoxUS+L6C9Guz
- TLSH T171D44A3639FCC637E3C2D530CE5DFA9070A9B92C4F2148A336D41E5F2A76992931662D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_56984217a98bfc0649b1abfa26e26237_elex_wannacry.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_56984217a98bfc0649b1abfa26e26237_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_56984217a98bfc0649b1abfa26e26237_elex_wannacry
- Size 633KB
- SHA256 5053f05d43f2a0a6f700ef9bbc13276654734c093b9e81ef3ffe68b7b6c77fe4
- MD5 56984217a98bfc0649b1abfa26e26237
- SHA1 7a785aa01cd65d8ea518f1b16f1f137f29914ab8
- SHA512 12d15d4a889c88b131b4b42f23a4d151166d7503754082fa869545bf07eb7629b78ec5661061b88e55361dcdc0a9e4727f956ceb191b17f2ffc7adf344fda2ea
- SSDEEP 12288:pGruf026ZlmR70Y/k9VS+L9MR2iefZ9GHO3d0s:Uuf0XoxUS+L6C9Guz
- TLSH T171D44A3639FCC637E3C2D530CE5DFA9070A9B92C4F2148A336D41E5F2A76992931662D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of file extensions in Explorer
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.