General
- Target 2026-08-13_d6f70ee12062f38a8d68f8b9a6b5497f_elex_wannacry
- Size 90KB
- Sample260813-yns7badb24
- SHA256 fa1579654dd365a7d0d3c66feaf5e7d23fdd820880792c468463b2c092d49d71
- MD5 d6f70ee12062f38a8d68f8b9a6b5497f
- SHA1 9d64914dc2c8897477b3ce6fa76aeebc943cd72d
- SHA512 012949c90589449ac41b25805abda812cfb1aad7c1190ad20475b1a70e6e776cc523428e36bcc71b01ee66c5d8d23f239fb471638c849de6aba5248712980478
- SSDEEP 768:50w981IshKQLro44/wQozzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzv:CEGI0o4lVunMxVS3c
- TLSH T1A693AA2A4DEA207BE173E570A5E116F2BA1EA55E35C50D0E05C3C35D8D62E02BEE7D0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-13_d6f70ee12062f38a8d68f8b9a6b5497f_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_d6f70ee12062f38a8d68f8b9a6b5497f_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_d6f70ee12062f38a8d68f8b9a6b5497f_elex_wannacry
- Size 90KB
- SHA256 fa1579654dd365a7d0d3c66feaf5e7d23fdd820880792c468463b2c092d49d71
- MD5 d6f70ee12062f38a8d68f8b9a6b5497f
- SHA1 9d64914dc2c8897477b3ce6fa76aeebc943cd72d
- SHA512 012949c90589449ac41b25805abda812cfb1aad7c1190ad20475b1a70e6e776cc523428e36bcc71b01ee66c5d8d23f239fb471638c849de6aba5248712980478
- SSDEEP 768:50w981IshKQLro44/wQozzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzv:CEGI0o4lVunMxVS3c
- TLSH T1A693AA2A4DEA207BE173E570A5E116F2BA1EA55E35C50D0E05C3C35D8D62E02BEE7D0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE