General
- Target 2026-08-12_dced38bb8e64bca6ba7e32abc8a9c7dc_elex_wannacry
- Size 60KB
- Sample260812-lp71ms1tdv
- SHA256 5c4a785f6271eaeaf7ef870b1b8e5d744c2a03fc3c0a6c888a19c245e7b16663
- MD5 dced38bb8e64bca6ba7e32abc8a9c7dc
- SHA1 abdbb8d341ef44b5d480164e57629c715756146c
- SHA512 52d4504bf297d5852cab3779cb16667bf8fcad5a2a1057ef8d7d5deaed359b37813e273e952fa563dabb4b6a1a1a7b84c1f61f5bbe8d8c5587b691e6223fdd9e
- SSDEEP 192:obOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwhY04/CFxyNhoy5t/:obLwOs8AHsc4sMfwhKQLroT4/CFsrd/
- TLSH T1095308834BDE9CF2F791117108798BB9927B99D4910EBEDFAF90CD550077292E83A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-12_dced38bb8e64bca6ba7e32abc8a9c7dc_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_dced38bb8e64bca6ba7e32abc8a9c7dc_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_dced38bb8e64bca6ba7e32abc8a9c7dc_elex_wannacry
- Size 60KB
- SHA256 5c4a785f6271eaeaf7ef870b1b8e5d744c2a03fc3c0a6c888a19c245e7b16663
- MD5 dced38bb8e64bca6ba7e32abc8a9c7dc
- SHA1 abdbb8d341ef44b5d480164e57629c715756146c
- SHA512 52d4504bf297d5852cab3779cb16667bf8fcad5a2a1057ef8d7d5deaed359b37813e273e952fa563dabb4b6a1a1a7b84c1f61f5bbe8d8c5587b691e6223fdd9e
- SSDEEP 192:obOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwhY04/CFxyNhoy5t/:obLwOs8AHsc4sMfwhKQLroT4/CFsrd/
- TLSH T1095308834BDE9CF2F791117108798BB9927B99D4910EBEDFAF90CD550077292E83A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE