06ddd8d55008715c0e5ab3b17fe8cf51f64a793581c5b4aaa8f62d8fff60f044 | Triage™

Login
Reports

Overview

overview

Static

static

3

2026-08-14...ry.exe

windows10-2004-x64

2026-08-14...ry.exe

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-14_2e633598ccb78f3acf970f627acdecbd_elex_wannacry
Size 90KB
Sample260815-ae9wpsvyfs
SHA256 06ddd8d55008715c0e5ab3b17fe8cf51f64a793581c5b4aaa8f62d8fff60f044
MD5 2e633598ccb78f3acf970f627acdecbd
SHA1 79c84105894e8ffb9db8e8a6fbc8321792405172
SHA512 262ade1813575ef21003e7fa574fac400508bba420359b434b75f77b9125279cc01d4c98c18ef13af40df84bc2aae912f9a254002f6a9315e301685a91bfd704
SSDEEP 1536:UCr++NMoO/aLB/lmzuEarAv70lh2lN2jG9X50uRZw3wimi5jKy+vvmhJFDLnJ:W++S/lmzxDS0l0GFKuRZwAwgmhJ91
TLSH
T12193E096ABC118B5FE3B0235205BB279E37335B4061A7AA78F50CDBAB872111CD163C6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

defense_evasion discovery persistence

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-08-14_2e633598ccb78f3acf970f627acdecbd_elex_wannacry.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

150 seconds

defense_evasion discovery persistence

Behavioral task

behavioral2

Sample

2026-08-14_2e633598ccb78f3acf970f627acdecbd_elex_wannacry.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

defense_evasion discovery persistence

Malware Config

Targets

- Target
  2026-08-14_2e633598ccb78f3acf970f627acdecbd_elex_wannacry
- Size 90KB
- SHA256 06ddd8d55008715c0e5ab3b17fe8cf51f64a793581c5b4aaa8f62d8fff60f044
- MD5 2e633598ccb78f3acf970f627acdecbd
- SHA1 79c84105894e8ffb9db8e8a6fbc8321792405172
- SHA512 262ade1813575ef21003e7fa574fac400508bba420359b434b75f77b9125279cc01d4c98c18ef13af40df84bc2aae912f9a254002f6a9315e301685a91bfd704
- SSDEEP 1536:UCr++NMoO/aLB/lmzuEarAv70lh2lN2jG9X50uRZw3wimi5jKy+vvmhJFDLnJ:W++S/lmzxDS0l0GFKuRZwAwgmhJ91
- TLSH
  T12193E096ABC118B5FE3B0235205BB279E37335B4061A7AA78F50CDBAB872111CD163C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery persistence
- Modifies firewall policy service
  defense_evasion
- Adds policy Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistence

behavioral2

defense_evasiondiscoverypersistence

© 2018-2026

Terms | Privacy