General
- Target 2026-08-13_a2b873bb28208aace3200636268e6b93_elex_wannacry
- Size 60KB
- Sample260813-ek8caa1elc
- SHA256 b1db9ed0ab4435edca1af9ff28676638540c07e1b81f4b3f699ae5681286bb13
- MD5 a2b873bb28208aace3200636268e6b93
- SHA1 f4fcbd223f1e5864771af0a69a9404dd46a1b773
- SHA512 3e9f05bdfb2a8458e0d573caa3c8c246be16884cda7ec0f18bcf6e3f93768f898dddebf9ca3ce056bb8ad2f59fb9d4091113f736627f0a64aa86819411a86204
- SSDEEP 192:pbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwUY04/CFxyNhoy5t:pbLwOs8AHsc4sMfwhKQLroi4/CFsrd
- TLSH T1415308834BDE9CF2F791123108798AB9927B99C4950EBEDFBF90CD154037292E53A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-13_a2b873bb28208aace3200636268e6b93_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_a2b873bb28208aace3200636268e6b93_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_a2b873bb28208aace3200636268e6b93_elex_wannacry
- Size 60KB
- SHA256 b1db9ed0ab4435edca1af9ff28676638540c07e1b81f4b3f699ae5681286bb13
- MD5 a2b873bb28208aace3200636268e6b93
- SHA1 f4fcbd223f1e5864771af0a69a9404dd46a1b773
- SHA512 3e9f05bdfb2a8458e0d573caa3c8c246be16884cda7ec0f18bcf6e3f93768f898dddebf9ca3ce056bb8ad2f59fb9d4091113f736627f0a64aa86819411a86204
- SSDEEP 192:pbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwUY04/CFxyNhoy5t:pbLwOs8AHsc4sMfwhKQLroi4/CFsrd
- TLSH T1415308834BDE9CF2F791123108798AB9927B99C4950EBEDFBF90CD154037292E53A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE