General
- Target 2026-08-13_0e743c00d05dc5f313d8b7700aaaa336_elex_wannacry
- Size 84KB
- Sample260813-vfc9cavbmb
- SHA256 37167022addbcd9d341bc672e316418ae0b42bf3ac9b89889812a75bbba299a6
- MD5 0e743c00d05dc5f313d8b7700aaaa336
- SHA1 ac71d2cc8460d3b69bcbea6b6060e4eeaeb16149
- SHA512 2f06a9533e3adcf0bd4abd7e97c05692d4b8fc581de0fc761ddcf4a8b957c15fb2f9586b3291977fa1bc0d11ab8e39da4a2923b05670f013ee0b143d9dc89e81
- SSDEEP 768:svw9816vhKQLro74/wQWdYiJdYrJhdYrJosTX0udYrJosTVsTev:MEGh0o7llZCJvCJXX0SCJXuev
- TLSH T182830A5372DC5CF3F2A613382977AF674D42BB90050A3B525AC08A8F499C9D7D62C34B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-13_0e743c00d05dc5f313d8b7700aaaa336_elex_wannacry.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_0e743c00d05dc5f313d8b7700aaaa336_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_0e743c00d05dc5f313d8b7700aaaa336_elex_wannacry
- Size 84KB
- SHA256 37167022addbcd9d341bc672e316418ae0b42bf3ac9b89889812a75bbba299a6
- MD5 0e743c00d05dc5f313d8b7700aaaa336
- SHA1 ac71d2cc8460d3b69bcbea6b6060e4eeaeb16149
- SHA512 2f06a9533e3adcf0bd4abd7e97c05692d4b8fc581de0fc761ddcf4a8b957c15fb2f9586b3291977fa1bc0d11ab8e39da4a2923b05670f013ee0b143d9dc89e81
- SSDEEP 768:svw9816vhKQLro74/wQWdYiJdYrJhdYrJosTX0udYrJosTVsTev:MEGh0o7llZCJvCJXX0SCJXuev
- TLSH T182830A5372DC5CF3F2A613382977AF674D42BB90050A3B525AC08A8F499C9D7D62C34B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE