General
- Target 2026-08-14_c0139f840dd1c2a360029027159e886d_elex_wannacry
- Size 84KB
- Sample260815-cnlxcaxybt
- SHA256 abe7b525211d0ca3fe1ecf0338488fc4bb993d21abab9b04b02f3baf6712fc4e
- MD5 c0139f840dd1c2a360029027159e886d
- SHA1 15269d3339d89e3edb750555376c1080018560e9
- SHA512 ab728049dc5863c2181f1fc26851b565c481de9f92ad599c328d0211bfecb7b005e689d8e7299e0c858ee38157a8eee6515708623f56d36031d425e3369b90bf
- SSDEEP 768:svw9816vhKQLro+4/wQWdYiJdYrJhdYrJosTX0udYrJosTVsTev:MEGh0o+llZCJvCJXX0SCJXuev
- TLSH T1E4830A5372DC5CF3F1A623382977AF674D42BB90050A3B525AC08A8F499C9D7DA2C35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-14_c0139f840dd1c2a360029027159e886d_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_c0139f840dd1c2a360029027159e886d_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_c0139f840dd1c2a360029027159e886d_elex_wannacry
- Size 84KB
- SHA256 abe7b525211d0ca3fe1ecf0338488fc4bb993d21abab9b04b02f3baf6712fc4e
- MD5 c0139f840dd1c2a360029027159e886d
- SHA1 15269d3339d89e3edb750555376c1080018560e9
- SHA512 ab728049dc5863c2181f1fc26851b565c481de9f92ad599c328d0211bfecb7b005e689d8e7299e0c858ee38157a8eee6515708623f56d36031d425e3369b90bf
- SSDEEP 768:svw9816vhKQLro+4/wQWdYiJdYrJhdYrJosTX0udYrJosTVsTev:MEGh0o+llZCJvCJXX0SCJXuev
- TLSH T1E4830A5372DC5CF3F1A623382977AF674D42BB90050A3B525AC08A8F499C9D7DA2C35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE