b64beab9b547d429e561a30b8a2c351e5b6e55912d61b634b14cb763a9f8378a | Triage™

Login
Reports

Overview

overview

Static

static

3

2026-08-14...ry.exe

windows10-2004-x64

2026-08-14...ry.exe

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-14_1b72c343b93faa38df3081a13048e586_elex_wannacry
Size 117KB
Sample260814-mwbrfsstdx
SHA256 b64beab9b547d429e561a30b8a2c351e5b6e55912d61b634b14cb763a9f8378a
MD5 1b72c343b93faa38df3081a13048e586
SHA1 a15c818dfb21ff5033363493512f5c669fb59ac3
SHA512 39e1936842ff00808be89673728ea48ced16a96a4456c87ea74149e20483807c07408c939d50e29fe8db192b7322bd00db60b106052edf73aaff22fbf88bf611
SSDEEP 3072:W++S/lmzxDS0l0GFKuRZwAwgmhJ9qx0pBt61:iS/lm1djkcZghJ9qx0pBw
TLSH
T182C3F1AAAFC164F9F93B0235201BB278D77335F506167A974F90CEB6AC72101DA163C9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

defense_evasion discovery persistence

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-08-14_1b72c343b93faa38df3081a13048e586_elex_wannacry.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

150 seconds

defense_evasion discovery persistence

Behavioral task

behavioral2

Sample

2026-08-14_1b72c343b93faa38df3081a13048e586_elex_wannacry.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

defense_evasion discovery persistence

Malware Config

Targets

- Target
  2026-08-14_1b72c343b93faa38df3081a13048e586_elex_wannacry
- Size 117KB
- SHA256 b64beab9b547d429e561a30b8a2c351e5b6e55912d61b634b14cb763a9f8378a
- MD5 1b72c343b93faa38df3081a13048e586
- SHA1 a15c818dfb21ff5033363493512f5c669fb59ac3
- SHA512 39e1936842ff00808be89673728ea48ced16a96a4456c87ea74149e20483807c07408c939d50e29fe8db192b7322bd00db60b106052edf73aaff22fbf88bf611
- SSDEEP 3072:W++S/lmzxDS0l0GFKuRZwAwgmhJ9qx0pBt61:iS/lm1djkcZghJ9qx0pBw
- TLSH
  T182C3F1AAAFC164F9F93B0235201BB278D77335F506167A974F90CEB6AC72101DA163C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery persistence
- Modifies firewall policy service
  defense_evasion
- Adds policy Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistence

behavioral2

defense_evasiondiscoverypersistence

© 2018-2026

Terms | Privacy