General
- Target 2026-08-11_cfd74dbb2f343f67f8531013f4099f0d_elex_wannacry
- Size 60KB
- Sample260811-n7a5qssdrd
- SHA256 9ccf9d26af4efbb6ee19f292d98fe31cfc70c9ffb4d5953ea3c46573d254f4a9
- MD5 cfd74dbb2f343f67f8531013f4099f0d
- SHA1 564e16e9cd67c5f58d0cc9c79379e98d29c2e8fd
- SHA512 e32b770ed8560f9bccfe7a7e33fedbde0aebd8a6b70a0fccb0c6f411a778cecbf682f4793f44230bfca2759e1f0e282c16f1323b52b0ecb7d5fa3cffe81fd172
- SSDEEP 192:obOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwhY04/CFxyNhoy5t/:obLwOs8AHsc4sMfwhKQLroT4/CFsrd/
- TLSH T1155307834BDA9CF2FB91117108794BB9927B99D4910EBEDFAB90CD150077292E83A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-11_cfd74dbb2f343f67f8531013f4099f0d_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_cfd74dbb2f343f67f8531013f4099f0d_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_cfd74dbb2f343f67f8531013f4099f0d_elex_wannacry
- Size 60KB
- SHA256 9ccf9d26af4efbb6ee19f292d98fe31cfc70c9ffb4d5953ea3c46573d254f4a9
- MD5 cfd74dbb2f343f67f8531013f4099f0d
- SHA1 564e16e9cd67c5f58d0cc9c79379e98d29c2e8fd
- SHA512 e32b770ed8560f9bccfe7a7e33fedbde0aebd8a6b70a0fccb0c6f411a778cecbf682f4793f44230bfca2759e1f0e282c16f1323b52b0ecb7d5fa3cffe81fd172
- SSDEEP 192:obOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwhY04/CFxyNhoy5t/:obLwOs8AHsc4sMfwhKQLroT4/CFsrd/
- TLSH T1155307834BDA9CF2FB91117108794BB9927B99D4910EBEDFAB90CD150077292E83A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE