General
- Target 2026-08-14_f408980352a94f883c491f731cdcd8ed_elex_wannacry
- Size 18KB
- Sample260814-lctbqazzev
- SHA256 1ab9e6178f742a115f67747123f55b358a47e4b7e77db8c0caf11a4326da675f
- MD5 f408980352a94f883c491f731cdcd8ed
- SHA1 25719dcd7ebec53c0a80c9a9a5ada30c95d7c92e
- SHA512 c85febe82e643377c23770f91ffb80d4fd7aed1c058b9934e09d91499cbf3e87a95cce9e4e8e5fd4f7fb87cfce23cab3f74e0705719d75ae30e073cfbf713c2a
- SSDEEP 192:uTk5WckBezHYQRPK6k7TjHwCl1oynzc2Fjmf2mrETLLC0qmg+jjGiEloCFy3nL6m:uTQWckBeEd6ml1pcg7F3GiElpd21
- TLSH T1E482A5356BD55D73E3BBD7B596F7C1C66875742B2E03992E80481B882C23B10DCA0F89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-14_f408980352a94f883c491f731cdcd8ed_elex_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_f408980352a94f883c491f731cdcd8ed_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_f408980352a94f883c491f731cdcd8ed_elex_wannacry
- Size 18KB
- SHA256 1ab9e6178f742a115f67747123f55b358a47e4b7e77db8c0caf11a4326da675f
- MD5 f408980352a94f883c491f731cdcd8ed
- SHA1 25719dcd7ebec53c0a80c9a9a5ada30c95d7c92e
- SHA512 c85febe82e643377c23770f91ffb80d4fd7aed1c058b9934e09d91499cbf3e87a95cce9e4e8e5fd4f7fb87cfce23cab3f74e0705719d75ae30e073cfbf713c2a
- SSDEEP 192:uTk5WckBezHYQRPK6k7TjHwCl1oynzc2Fjmf2mrETLLC0qmg+jjGiEloCFy3nL6m:uTQWckBeEd6ml1pcg7F3GiElpd21
- TLSH T1E482A5356BD55D73E3BBD7B596F7C1C66875742B2E03992E80481B882C23B10DCA0F89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Waski payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE