General
- Target 2026-08-11_530a69b13e8da1803748a9517bce435b_elex_wannacry
- Size 68KB
- Sample260811-drllesvbna
- SHA256 2e63eaf95a595de4b6476f447357a198ece5f8fc1efd83bc7591685937d34fc7
- MD5 530a69b13e8da1803748a9517bce435b
- SHA1 5db67997600d59e22a0d52f79eec375c46806820
- SHA512 4f6cac4c0972f5277efdc4ad9f4d4177e6e1c5024d411338e2ed113feb739b54d9dca0e4798a3fa90a63894e70f570af64cc19c2ded425af50040b9fceb09301
- SSDEEP 192:1bOzawOs81elJHsc458cRZOsdShcWaOT2QLrCqww5Y04/CFxyNhoy5tU:1bLwOs8AHsc42M9ghKQLrowL4/CFsrdU
- TLSH T1C7632B4306BD7CF3E54B293028A445744DE667C06209E9BB7FECD91BE02B96D9CAD086
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-11_530a69b13e8da1803748a9517bce435b_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_530a69b13e8da1803748a9517bce435b_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_530a69b13e8da1803748a9517bce435b_elex_wannacry
- Size 68KB
- SHA256 2e63eaf95a595de4b6476f447357a198ece5f8fc1efd83bc7591685937d34fc7
- MD5 530a69b13e8da1803748a9517bce435b
- SHA1 5db67997600d59e22a0d52f79eec375c46806820
- SHA512 4f6cac4c0972f5277efdc4ad9f4d4177e6e1c5024d411338e2ed113feb739b54d9dca0e4798a3fa90a63894e70f570af64cc19c2ded425af50040b9fceb09301
- SSDEEP 192:1bOzawOs81elJHsc458cRZOsdShcWaOT2QLrCqww5Y04/CFxyNhoy5tU:1bLwOs8AHsc42M9ghKQLrowL4/CFsrdU
- TLSH T1C7632B4306BD7CF3E54B293028A445744DE667C06209E9BB7FECD91BE02B96D9CAD086
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE