General
- Target 2026-08-12_067c21710d1be28d16259a497ca12aba_elex_wannacry
- Size 20KB
- Sample260812-ed42aaad47
- SHA256 c3fce5b6a3ef15e26c39f9cef110323066f861386b97b2c7f84c2cb2c1cc6ee2
- MD5 067c21710d1be28d16259a497ca12aba
- SHA1 251dc362878a50a9be39dd590b2ee023ef98ed63
- SHA512 ffa1ba9b43b8f2124e16a9c7af9054420bf991e4903ce073448aadf07900d93aa5ab522dd4bee534a7bcdfa0f31cc3e59ca28a6961b552a4ce47d9cd093b38b9
- SSDEEP 192:uTk5WckBezHYQRPK6k7TjHwCl1oynzc2Fjmf2mrETLLC0qmg+jjGimebgrJWlkGa:uTQWckBeEd6ml1pcg7F3GiSrI8raA
- TLSH T1949284346FD50EB2E3BBD7F285F7D2C6A975B0377A035A2E80451B841823A11DDA0E9D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-12_067c21710d1be28d16259a497ca12aba_elex_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_067c21710d1be28d16259a497ca12aba_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_067c21710d1be28d16259a497ca12aba_elex_wannacry
- Size 20KB
- SHA256 c3fce5b6a3ef15e26c39f9cef110323066f861386b97b2c7f84c2cb2c1cc6ee2
- MD5 067c21710d1be28d16259a497ca12aba
- SHA1 251dc362878a50a9be39dd590b2ee023ef98ed63
- SHA512 ffa1ba9b43b8f2124e16a9c7af9054420bf991e4903ce073448aadf07900d93aa5ab522dd4bee534a7bcdfa0f31cc3e59ca28a6961b552a4ce47d9cd093b38b9
- SSDEEP 192:uTk5WckBezHYQRPK6k7TjHwCl1oynzc2Fjmf2mrETLLC0qmg+jjGimebgrJWlkGa:uTQWckBeEd6ml1pcg7F3GiSrI8raA
- TLSH T1949284346FD50EB2E3BBD7F285F7D2C6A975B0377A035A2E80451B841823A11DDA0E9D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Waski payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE