General
- Target 2026-08-11_df4d87db4801b067aa31ea3209c23d89_elex_wannacry
- Size 404KB
- Sample260811-cnj3rabh47
- SHA256 bfd1f95ad013a4ce274157acf082b13891a4ca5865df8139c7020e6552840ad6
- MD5 df4d87db4801b067aa31ea3209c23d89
- SHA1 8c7538555047c8c67890364999f352cbf9b306e8
- SHA512 e43f66c3bb99294a6837a23a68ae13534d9d28890427d6459399fd6cacc1937e02fa7bfdc1fb3ce9df204fb0ca23f6f960cce87ba23260a00accf7ee6bff4d95
- SSDEEP 3072:UoVDjW0L3KjsFt1v9jrOIRoXyefstPbKsqU0yf1bhUwYwjFrf6/U0aRxUpSaqYBa:d+0TOanEwYwjFrfAUNRxg
- TLSH T1C2949D06726AC3BDDF9207758EEA54B22BA7ECE28E219CC6648C375E5C31BD34D04356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-11_df4d87db4801b067aa31ea3209c23d89_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_df4d87db4801b067aa31ea3209c23d89_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_df4d87db4801b067aa31ea3209c23d89_elex_wannacry
- Size 404KB
- SHA256 bfd1f95ad013a4ce274157acf082b13891a4ca5865df8139c7020e6552840ad6
- MD5 df4d87db4801b067aa31ea3209c23d89
- SHA1 8c7538555047c8c67890364999f352cbf9b306e8
- SHA512 e43f66c3bb99294a6837a23a68ae13534d9d28890427d6459399fd6cacc1937e02fa7bfdc1fb3ce9df204fb0ca23f6f960cce87ba23260a00accf7ee6bff4d95
- SSDEEP 3072:UoVDjW0L3KjsFt1v9jrOIRoXyefstPbKsqU0yf1bhUwYwjFrf6/U0aRxUpSaqYBa:d+0TOanEwYwjFrfAUNRxg
- TLSH T1C2949D06726AC3BDDF9207758EEA54B22BA7ECE28E219CC6648C375E5C31BD34D04356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.