General
- Target 2026-08-14_158a1c80cc4670fb81fe7820850e7ebc_elex_wannacry
- Size 84KB
- Sample260815-c41ensxdng
- SHA256 a4beee4d27553ba4bdc16d0602df8c680c5c5090aa6d809c7fea04a8a88b7a65
- MD5 158a1c80cc4670fb81fe7820850e7ebc
- SHA1 c2856b043e4aa34331f39a412f6f0a336b6d531c
- SHA512 595be371d952e5c76bc89bf33889c53a69afe91a4e473a1b7a62c2cbfe87ed8adc340eb13e762983b5bf6c1a472a3d8c84d126465515c9940d51c7865bb3b587
- SSDEEP 768:svw9816vhKQLroP4/wQWdYiJdYrJhdYrJosTX0udYrJosTVsTev:MEGh0oPllZCJvCJXX0SCJXuev
- TLSH T1AF830A5372DC5CF3F1A623382977AB674D42BB90050A3B525AC08A8F499C9D7DA2C35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-14_158a1c80cc4670fb81fe7820850e7ebc_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_158a1c80cc4670fb81fe7820850e7ebc_elex_wannacry.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_158a1c80cc4670fb81fe7820850e7ebc_elex_wannacry
- Size 84KB
- SHA256 a4beee4d27553ba4bdc16d0602df8c680c5c5090aa6d809c7fea04a8a88b7a65
- MD5 158a1c80cc4670fb81fe7820850e7ebc
- SHA1 c2856b043e4aa34331f39a412f6f0a336b6d531c
- SHA512 595be371d952e5c76bc89bf33889c53a69afe91a4e473a1b7a62c2cbfe87ed8adc340eb13e762983b5bf6c1a472a3d8c84d126465515c9940d51c7865bb3b587
- SSDEEP 768:svw9816vhKQLroP4/wQWdYiJdYrJhdYrJosTX0udYrJosTVsTev:MEGh0oPllZCJvCJXX0SCJXuev
- TLSH T1AF830A5372DC5CF3F1A623382977AB674D42BB90050A3B525AC08A8F499C9D7DA2C35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE