General
- Target 2026-08-13_6a7dc470a322e1d6eb801d2cf98e6899_elex_wannacry
- Size 92KB
- Sample260813-zdv4layapd
- SHA256 a0bd845cf6c9930d5625b2d1424c5ae133820e999608e6a52356fc3e5c4eb8fc
- MD5 6a7dc470a322e1d6eb801d2cf98e6899
- SHA1 941baba51f2f1e6b6fbfef806e3587c4d4c7bfca
- SHA512 9535182e6a8e4202d59727a0c39916c43e084f94810addef897cd9bf6a4710dcc89f34eb1b2a05b5f3fcb438323347be603884dc5145456d9db96a21eceab9d8
- SSDEEP 192:ubOzawOs81elJHsc45gcRZOptShcWaOT2QLrCqwxY04/CFxyNhoy5tX:ubLwOs8AHsc4qMewhKQLroD4/CFsrdX
- TLSH T10393D973F69948E3F940213338AC45F4592F7B8C6309699E7ABDCD1E80FE261A735126
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-13_6a7dc470a322e1d6eb801d2cf98e6899_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_6a7dc470a322e1d6eb801d2cf98e6899_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_6a7dc470a322e1d6eb801d2cf98e6899_elex_wannacry
- Size 92KB
- SHA256 a0bd845cf6c9930d5625b2d1424c5ae133820e999608e6a52356fc3e5c4eb8fc
- MD5 6a7dc470a322e1d6eb801d2cf98e6899
- SHA1 941baba51f2f1e6b6fbfef806e3587c4d4c7bfca
- SHA512 9535182e6a8e4202d59727a0c39916c43e084f94810addef897cd9bf6a4710dcc89f34eb1b2a05b5f3fcb438323347be603884dc5145456d9db96a21eceab9d8
- SSDEEP 192:ubOzawOs81elJHsc45gcRZOptShcWaOT2QLrCqwxY04/CFxyNhoy5tX:ubLwOs8AHsc4qMewhKQLroD4/CFsrdX
- TLSH T10393D973F69948E3F940213338AC45F4592F7B8C6309699E7ABDCD1E80FE261A735126
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE