General
- Target 2026-08-14_3c886bb1278bceb88e1aea95809a5193_elex_wannacry
- Size 2.3MB
- Sample260814-1vvd3asele
- SHA256 0b3186c5d0a82b5dfe459bc88dfe4eca94d63ec35c45eb51391a2c8b7d49ca7a
- MD5 3c886bb1278bceb88e1aea95809a5193
- SHA1 8c938ab35da4b889b694d4bdb948d144cba6aed8
- SHA512 1590c46bc4f830c28ea6cec2a2f936ac01ca37c59445c00d16cf917635a635d33dc686a5e9481f80e6407b3755d609739d03422b93f9584128df0503be49c91f
- SSDEEP 6144:wGC43NaVhrGC43NaVhrGC43NaVhrGC43NaVhrGC43NaVh8:wAqAqAqAqAp
- TLSH T1A9B51AD576825363CB400631E00F0FB9626E6CD7811F9825A2F3BB565B742199EEC2BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_3c886bb1278bceb88e1aea95809a5193_elex_wannacry.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_3c886bb1278bceb88e1aea95809a5193_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_3c886bb1278bceb88e1aea95809a5193_elex_wannacry
- Size 2.3MB
- SHA256 0b3186c5d0a82b5dfe459bc88dfe4eca94d63ec35c45eb51391a2c8b7d49ca7a
- MD5 3c886bb1278bceb88e1aea95809a5193
- SHA1 8c938ab35da4b889b694d4bdb948d144cba6aed8
- SHA512 1590c46bc4f830c28ea6cec2a2f936ac01ca37c59445c00d16cf917635a635d33dc686a5e9481f80e6407b3755d609739d03422b93f9584128df0503be49c91f
- SSDEEP 6144:wGC43NaVhrGC43NaVhrGC43NaVhrGC43NaVhrGC43NaVh8:wAqAqAqAqAp
- TLSH T1A9B51AD576825363CB400631E00F0FB9626E6CD7811F9825A2F3BB565B742199EEC2BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of file extensions in Explorer
-
Disables RegEdit via registry modification
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Accesses Microsoft Outlook accounts
-
Drops file in System32 directory