General
- Target 2026-08-13_d42e37bed71c27d8190c6b3d30b8894c_elex_wannacry
- Size 382KB
- Sample260813-ypf85sxejd
- SHA256 365dc3955465d0c5b95c1c66aa126d18648df04efc629ecbe68b525112079838
- MD5 d42e37bed71c27d8190c6b3d30b8894c
- SHA1 106c1ff92364aa610706c5ebd79892305e0b0d73
- SHA512 b58d3f1ead71095e56b9c3ecc6f8a95ec6c995cc3a9755b0feb5e1c72c975edb7f9d8fae2ab20830105ec4b9d526743743531e3af08c09043970c8867a842652
- SSDEEP 3072:63ZBIREn29eD9nxg0NFgCzPF6j0UvMjtRbQ9VjI36V8+IuKSarP/okbyaS:En809nxD3d5Q9VjIKL2okmaS
- TLSH T1D484AD02AF379FFDC6A074784C59CCA52B275EC2DCA0B19A545A739E37BC6830E91057
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_d42e37bed71c27d8190c6b3d30b8894c_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_d42e37bed71c27d8190c6b3d30b8894c_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_d42e37bed71c27d8190c6b3d30b8894c_elex_wannacry
- Size 382KB
- SHA256 365dc3955465d0c5b95c1c66aa126d18648df04efc629ecbe68b525112079838
- MD5 d42e37bed71c27d8190c6b3d30b8894c
- SHA1 106c1ff92364aa610706c5ebd79892305e0b0d73
- SHA512 b58d3f1ead71095e56b9c3ecc6f8a95ec6c995cc3a9755b0feb5e1c72c975edb7f9d8fae2ab20830105ec4b9d526743743531e3af08c09043970c8867a842652
- SSDEEP 3072:63ZBIREn29eD9nxg0NFgCzPF6j0UvMjtRbQ9VjI36V8+IuKSarP/okbyaS:En809nxD3d5Q9VjIKL2okmaS
- TLSH T1D484AD02AF379FFDC6A074784C59CCA52B275EC2DCA0B19A545A739E37BC6830E91057
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.