General
- Target 2026-08-14_ef96363dd5e926ae1dd475bd492a41ac_elex_wannacry
- Size 64KB
- Sample260814-ssqzvsweph
- SHA256 d172b530117bd6b343030cff976f97b06e54d40b3af748aa1dc9063a4d13eded
- MD5 ef96363dd5e926ae1dd475bd492a41ac
- SHA1 5e7494c764b2bfbe9bdc594060f5eb770ab664e0
- SHA512 3bc565d2b3612d0cd251fb00ce1291ba52d55b4b9c47499c1be14a1bc87442fd657d2e0232eea903857377ac51ff75d3b3e492b6e2eff37cb55db730e55ac3a5
- SSDEEP 192:gbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqw58Y04/CFxyNhoy5t:gbLwOs8AHsc4sMfwhKQLroU4/CFsrd
- TLSH T18D5307834BDE9CF2F791117108794BB9927B99D4910EBEDFAF90CD150037292E83A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-14_ef96363dd5e926ae1dd475bd492a41ac_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_ef96363dd5e926ae1dd475bd492a41ac_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_ef96363dd5e926ae1dd475bd492a41ac_elex_wannacry
- Size 64KB
- SHA256 d172b530117bd6b343030cff976f97b06e54d40b3af748aa1dc9063a4d13eded
- MD5 ef96363dd5e926ae1dd475bd492a41ac
- SHA1 5e7494c764b2bfbe9bdc594060f5eb770ab664e0
- SHA512 3bc565d2b3612d0cd251fb00ce1291ba52d55b4b9c47499c1be14a1bc87442fd657d2e0232eea903857377ac51ff75d3b3e492b6e2eff37cb55db730e55ac3a5
- SSDEEP 192:gbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqw58Y04/CFxyNhoy5t:gbLwOs8AHsc4sMfwhKQLroU4/CFsrd
- TLSH T18D5307834BDE9CF2F791117108794BB9927B99D4910EBEDFAF90CD150037292E83A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE