General
- Target 2026-08-10_2947939f71e4fd771c6ca4a9cdd51189_elex_wannacry
- Size 64KB
- Sample260810-hf1nescq2v
- SHA256 47839dabcbd3ebbacb977d468f1f529009072a9bdac2ecb572a698a79c81e8ea
- MD5 2947939f71e4fd771c6ca4a9cdd51189
- SHA1 2658a9c6b3d4673e02d6235473cfccd46346b168
- SHA512 a949a5b1a5dea50eeb3d44b8d3bba412c5dc0c8d7c8b6c38352b220b30a6d4bf8e11fa58cb7bd3328074373c57685414675e0d8d4e95830a7cb76a7aa8a2d1d1
- SSDEEP 192:ObOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwdY04/CFxyNhoy5tY:ObLwOs8AHsc4sMfwhKQLroP4/CFsrdY
- TLSH T10353E94B879D84B7E980C1388F3885BFB22B56CCB1096D5E97ECED038426D4198F5C6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-10_2947939f71e4fd771c6ca4a9cdd51189_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_2947939f71e4fd771c6ca4a9cdd51189_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_2947939f71e4fd771c6ca4a9cdd51189_elex_wannacry
- Size 64KB
- SHA256 47839dabcbd3ebbacb977d468f1f529009072a9bdac2ecb572a698a79c81e8ea
- MD5 2947939f71e4fd771c6ca4a9cdd51189
- SHA1 2658a9c6b3d4673e02d6235473cfccd46346b168
- SHA512 a949a5b1a5dea50eeb3d44b8d3bba412c5dc0c8d7c8b6c38352b220b30a6d4bf8e11fa58cb7bd3328074373c57685414675e0d8d4e95830a7cb76a7aa8a2d1d1
- SSDEEP 192:ObOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwdY04/CFxyNhoy5tY:ObLwOs8AHsc4sMfwhKQLroP4/CFsrdY
- TLSH T10353E94B879D84B7E980C1388F3885BFB22B56CCB1096D5E97ECED038426D4198F5C6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE