General
- Target 2026-08-12_ca94a402cf5b3513465796edf48bd8e1_elex_wannacry
- Size 382KB
- Sample260812-zhmb9aef94
- SHA256 34e64b29729831ef8b7e4cb0b6ddafcc688faa23de423edb1f71710e7532e253
- MD5 ca94a402cf5b3513465796edf48bd8e1
- SHA1 9268bd3388c09248e994aff27d2268f921c21f36
- SHA512 f7cfdbc820e1daa6bb89fdc0071a7f54d58878aaa426d81635397299f9c335d5b6403bec7d26f81795ad6a165a3ca0cffb7a25eccf2c393bc3d5583d8e2e2965
- SSDEEP 3072:slCRyCC6BPR+hSv5mvi/7slDiWwhYrFbA8+CSLaba6M75QxnUN6MDVB8edAPZ+Hs:sCHM85muID5y8x0hDs/JzT18LJVkeg
- TLSH T16D849D30E1ACA624C998CFB0CFE69AA934453F20EC21C78A7255B35D1F3564345AB7F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_ca94a402cf5b3513465796edf48bd8e1_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_ca94a402cf5b3513465796edf48bd8e1_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_ca94a402cf5b3513465796edf48bd8e1_elex_wannacry
- Size 382KB
- SHA256 34e64b29729831ef8b7e4cb0b6ddafcc688faa23de423edb1f71710e7532e253
- MD5 ca94a402cf5b3513465796edf48bd8e1
- SHA1 9268bd3388c09248e994aff27d2268f921c21f36
- SHA512 f7cfdbc820e1daa6bb89fdc0071a7f54d58878aaa426d81635397299f9c335d5b6403bec7d26f81795ad6a165a3ca0cffb7a25eccf2c393bc3d5583d8e2e2965
- SSDEEP 3072:slCRyCC6BPR+hSv5mvi/7slDiWwhYrFbA8+CSLaba6M75QxnUN6MDVB8edAPZ+Hs:sCHM85muID5y8x0hDs/JzT18LJVkeg
- TLSH T16D849D30E1ACA624C998CFB0CFE69AA934453F20EC21C78A7255B35D1F3564345AB7F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.