af58b4e3ecb4760e68bad98eb957a4826c9fa5c2ab8c6f4802906d00278d7219

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/08/2026, 04:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-13_87d41112c2e419cd64b7f8b98cbc7e2e_elex_wannacry.exe
Size 1.0MB
Sample260813-eza1bsbj9v
SHA256 af58b4e3ecb4760e68bad98eb957a4826c9fa5c2ab8c6f4802906d00278d7219
MD5 87d41112c2e419cd64b7f8b98cbc7e2e
SHA1 8c7ca451dade122cdea82f620665241ed9ba3eae
SHA512 ba18a5d0f9283120e75e9725cec7e26bc07ba1fc6c404717a15d9030dcdf4ee5b58f0ff6242f63e2889b72a425aa9fe97ff7ddc8cd9b12c8f7d698348b6a0999
SSDEEP 24576:S9C0XrUMFDsTB6vGPG2LW+P+mzRe+rYsVbjtbgH03pIslc:S9C0Xgfe2DRe+rZVbjtbgHvuc
TLSH
T1F9253338B213C6B6D05E49320BA94D90AFB6713149743417DB88CDABAE7DBD7E0396C1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-08-13_87d41112c2e419cd64b7f8b98cbc7e2e_elex_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-13_87d41112c2e419cd64b7f8b98cbc7e2e_elex_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-13_87d41112c2e419cd64b7f8b98cbc7e2e_elex_wannacry.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4288

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4288-0-0x0000000000400000-0x000000000042D000-memory.dmp

Download