General
- Target 2026-08-11_a618e196dd8e4b14e3b83520ce3ab5d8_elex_wannacry
- Size 168KB
- Sample260811-xteensbm3v
- SHA256 4e20ada2621dfa6f178258ba4e7f647fc1679db5264a9fc2322e7295e9787c42
- MD5 a618e196dd8e4b14e3b83520ce3ab5d8
- SHA1 c5b7d7d15b3faefc4000f9a6eabb5d74012db5ce
- SHA512 867e82b5729ae1b9a63b2cef6bd983ec442f3d783205999f70018d48174bb26579f9dbef377a80c2a5e70f4867675948da8422769a5ce47db20a21c1238a9627
- SSDEEP 192:pbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwJ4/CFxyNhoy5t:pbLwOs8AHsc4sMfwhKQLroJ4/CFsrd
- TLSH T106F31A834BDE58F3FB81113008798AB9927B9AD4961DBEEF7F90CD250077292D53A50B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-11_a618e196dd8e4b14e3b83520ce3ab5d8_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_a618e196dd8e4b14e3b83520ce3ab5d8_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_a618e196dd8e4b14e3b83520ce3ab5d8_elex_wannacry
- Size 168KB
- SHA256 4e20ada2621dfa6f178258ba4e7f647fc1679db5264a9fc2322e7295e9787c42
- MD5 a618e196dd8e4b14e3b83520ce3ab5d8
- SHA1 c5b7d7d15b3faefc4000f9a6eabb5d74012db5ce
- SHA512 867e82b5729ae1b9a63b2cef6bd983ec442f3d783205999f70018d48174bb26579f9dbef377a80c2a5e70f4867675948da8422769a5ce47db20a21c1238a9627
- SSDEEP 192:pbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwJ4/CFxyNhoy5t:pbLwOs8AHsc4sMfwhKQLroJ4/CFsrd
- TLSH T106F31A834BDE58F3FB81113008798AB9927B9AD4961DBEEF7F90CD250077292D53A50B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE