Analysis
- max time kernel
148s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
11/08/2026, 22:21
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe
- Size 853KB
- Sample260811-19pgcsshqd
- SHA256 f3ab1cc1bb62c9544ade6b5c5baa48fa70f53692ba8b43e3681753f4f789c05d
- MD5 b6020411a06fd8b37d89d9ce2b353c48
- SHA1 4ac839ff9ef129b65f0b88d94b5b96ac9db92a6d
- SHA512 a96cc73cef47ca929f20ec18908a475f300a03cc1ebcddee3d6e3db7bd1c1163f0252a4ffa24add3e132a25d3666213810d64cd670bf412d6076e0f82a93218e
- SSDEEP 12288:z1NCLK90/X2itTrxQ52HD12UgMZTD5tmx:z1NCL2O1tTrHgVM5DKx
- TLSH T14D057D3D20D48CB3D0925C3CF19597F2A2FEEDA50B324C87A7087D2D5AB1566E32529B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe - Suspicious behavior: EnumeratesProcesses 48 IoCs
pid Process 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe 3596 2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-11_b6020411a06fd8b37d89d9ce2b353c48_elex_unruy_wannacry.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:3596