2026-08-15_9eddab67884e4e2f1473e73baffc6e7b_elex_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-15_9eddab67884e4e2f1473e73baffc6e7b_elex_wannacry
Size 51KB
Sample260815-232zjsvela
SHA256 b4b2c0ad18df315850d96f934c647d7ca266a7d19ea4240a59e33ac7d9778f4e
MD5 9eddab67884e4e2f1473e73baffc6e7b
SHA1 5bd66b77f3ae12bff5a53df1bf15f8591e7f4275
SHA512 9e666bea4532fa5da9964be6a516438c71b68604488dd780da7e3d3818baeaa8fe8e5740185b95e6a5f3102f5318e71b3cdbac4d83bc52b2b6cc6bfc4cef088f
SSDEEP 768:OCNxU+Uh5ja9QI73wjbSpoo3e/HckrS2cr2qhSp1CT8PKrh5:LNxU+W+73uSpoo3e/8+dcr2ySHCT8PY5
TLSH
T12E339F529B56807FFD7056B8188753BE82255D2F214BFD0AE924FD218CEA1D3F8B9213
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-15_9eddab67884e4e2f1473e73baffc6e7b_elex_wannacry

File Explorer

2026-08-15_9eddab67884e4e2f1473e73baffc6e7b_elex_wannacry

.exe 51KB

2026-08-15_9eddab67884e4e2f1473e73baffc6e7b_elex_wannacry

IMPHASH 5afda5bec5ddd3ba31023406f0fca220
SHA256 b4b2c0ad18df315850d96f934c647d7ca266a7d19ea4240a59e33ac7d9778f4e
MD5 9eddab67884e4e2f1473e73baffc6e7b
SHA1 5bd66b77f3ae12bff5a53df1bf15f8591e7f4275
SHA512 9e666bea4532fa5da9964be6a516438c71b68604488dd780da7e3d3818baeaa8fe8e5740185b95e6a5f3102f5318e71b3cdbac4d83bc52b2b6cc6bfc4cef088f
SSDEEP 768:OCNxU+Uh5ja9QI73wjbSpoo3e/HckrS2cr2qhSp1CT8PKrh5:LNxU+W+73uSpoo3e/8+dcr2ySHCT8PY5
TLSH
T12E339F529B56807FFD7056B8188753BE82255D2F214BFD0AE924FD218CEA1D3F8B9213
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

42031

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

EnumWindows GetWindowTextA GetWindowThreadProcessId CharUpperA MessageBoxA GetWindowTextLengthA

shell32

ShellExecuteA

dbghelp

MakeSureDirectoryPathExists

urlmon

URLDownloadToFileA

msvcrt

_controlfp _except_handler3 __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit fwrite srand rand strstr _splitpath atoi tolower fopen fclose strchr sprintf _strlwr _strrev _strupr

wininet

InternetGetConnectedState

wsock32

connect gethostbyname recv shutdown closesocket WSACleanup htons socket WSAStartup __WSAFDIsSet select WSAGetLastError inet_ntoa send

advapi32

RegCreateKeyA AdjustTokenPrivileges RegOpenKeyExA RegQueryValueExA GetUserNameA RegCloseKey LookupPrivilegeValueA OpenProcessToken RegSetValueExA

kernel32

WinExec GetCurrentThread SetThreadPriority ExitThread CreateThread Sleep GetVersionExA GetComputerNameA FreeLibrary LoadLibraryA GetProcAddress GetModuleFileNameA GetSystemDirectoryA GetWindowsDirectoryA GetTempPathA CreateSemaphoreA ReleaseSemaphore CreateEventA ExitProcess CreateMutexA GetLastError lstrlenA GetTickCount lstrcpyA GetCurrentProcess GetModuleHandleA GetCurrentProcessId CreateToolhelp32Snapshot Process32First OpenProcess TerminateProcess Process32Next GetSystemTime CreateProcessA WritePrivateProfileStringA CreateDirectoryA CreateFileA CloseHandle GlobalFree GlobalAlloc GetStartupInfoA SetFileAttributesA CopyFileA ReleaseMutex GetDriveTypeA

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-15_9eddab67884e4e2f1473e73baffc6e7b_elex_wannacry

user32

shell32

dbghelp

urlmon

msvcrt

wininet

wsock32

advapi32

kernel32

generic