General
- Target 2026-08-10_1c3eb350aeac6196c3f2c2db0f268a97_elex_wannacry
- Size 270KB
- Sample260810-2vhwpsv1d1
- SHA256 9d3e33ac35bd76d9e421be4a38593a59a277df88736d1555bd555ce8651d026c
- MD5 1c3eb350aeac6196c3f2c2db0f268a97
- SHA1 5d37965d47366f9f9058aebb52f6624a6871e49f
- SHA512 3478ca712aa5ea479749f8c9c0ef599d2756c421e68c75809a45a2f5d8a6b84a8781228587349d164bcd128064dfa2cd530374ef804ae11ac59d432de5475692
- SSDEEP 1536:XGjuPg3YP4cdTEu+ECZZpTg33333333333333333334:XGC43DkTv+XZZpTJ
- TLSH T13E443C11A7965A49DC26273160130B3BD7F6181A70BE633758B1DE0DBE782296F3F239
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_1c3eb350aeac6196c3f2c2db0f268a97_elex_wannacry.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_1c3eb350aeac6196c3f2c2db0f268a97_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_1c3eb350aeac6196c3f2c2db0f268a97_elex_wannacry
- Size 270KB
- SHA256 9d3e33ac35bd76d9e421be4a38593a59a277df88736d1555bd555ce8651d026c
- MD5 1c3eb350aeac6196c3f2c2db0f268a97
- SHA1 5d37965d47366f9f9058aebb52f6624a6871e49f
- SHA512 3478ca712aa5ea479749f8c9c0ef599d2756c421e68c75809a45a2f5d8a6b84a8781228587349d164bcd128064dfa2cd530374ef804ae11ac59d432de5475692
- SSDEEP 1536:XGjuPg3YP4cdTEu+ECZZpTg33333333333333333334:XGC43DkTv+XZZpTJ
- TLSH T13E443C11A7965A49DC26273160130B3BD7F6181A70BE633758B1DE0DBE782296F3F239
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of file extensions in Explorer
-
Disables RegEdit via registry modification
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Accesses Microsoft Outlook accounts
-
Drops file in System32 directory