General
- Target 2026-08-11_dac6e7d3d5e38b0a547fe875bc5be21b_elex_wannacry
- Size 168KB
- Sample260811-t9mjfafd28
- SHA256 dabacce87b10f2a07c0eb0bfe5e5c3046ea444af2d0c3c7b1c60b2b203c3c86c
- MD5 dac6e7d3d5e38b0a547fe875bc5be21b
- SHA1 30ee2318743b00020216449e7c47f56e78e2276b
- SHA512 542d3ce34e0a051a2d392c0ecf6b556deaa72826de1a6f3a1b4d2644c3c46e366bba329e50ab0a68ce4eed58a1a75e522eb165623ae30cbc1000f761f01accda
- SSDEEP 192:pbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwK4/CFxyNhoy5t:pbLwOs8AHsc4sMfwhKQLroK4/CFsrd
- TLSH T1AEF318834BDE58F3FB85113008798AB9927B9AD4921EBEEF7F90CD250077252D53A50B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-11_dac6e7d3d5e38b0a547fe875bc5be21b_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_dac6e7d3d5e38b0a547fe875bc5be21b_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_dac6e7d3d5e38b0a547fe875bc5be21b_elex_wannacry
- Size 168KB
- SHA256 dabacce87b10f2a07c0eb0bfe5e5c3046ea444af2d0c3c7b1c60b2b203c3c86c
- MD5 dac6e7d3d5e38b0a547fe875bc5be21b
- SHA1 30ee2318743b00020216449e7c47f56e78e2276b
- SHA512 542d3ce34e0a051a2d392c0ecf6b556deaa72826de1a6f3a1b4d2644c3c46e366bba329e50ab0a68ce4eed58a1a75e522eb165623ae30cbc1000f761f01accda
- SSDEEP 192:pbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwK4/CFxyNhoy5t:pbLwOs8AHsc4sMfwhKQLroK4/CFsrd
- TLSH T1AEF318834BDE58F3FB85113008798AB9927B9AD4921EBEEF7F90CD250077252D53A50B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE