General
- Target 2026-08-15_1badbfbfc6750e0f238e3ed2349b8ab8_elex_wannacry
- Size 64KB
- Sample260815-w5952ssvhs
- SHA256 e2f7e5b3551f34f671a03c7f6f8a3acecc521d484525f1aac28fe30538cc6e36
- MD5 1badbfbfc6750e0f238e3ed2349b8ab8
- SHA1 9c8a39fa5a070530ecd006bfefa4121a7f13275f
- SHA512 2d0d2a950e83944d0e53e251f5a0a228e354d9846ec85b75a0f897b459aefe566130fe3c3239d485b0ccabc3bc204588f969e7b06451ac01f4dffa8be430de1f
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLroB4/CFsrdn0A9lsy4:vvw9816vhKQLroB4/wQH9lsl
- TLSH T1D0535C834BEE98F2F7D20131056D8A798277ADC4961EBEAF7F50CE54017B191D83A14B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-15_1badbfbfc6750e0f238e3ed2349b8ab8_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_1badbfbfc6750e0f238e3ed2349b8ab8_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_1badbfbfc6750e0f238e3ed2349b8ab8_elex_wannacry
- Size 64KB
- SHA256 e2f7e5b3551f34f671a03c7f6f8a3acecc521d484525f1aac28fe30538cc6e36
- MD5 1badbfbfc6750e0f238e3ed2349b8ab8
- SHA1 9c8a39fa5a070530ecd006bfefa4121a7f13275f
- SHA512 2d0d2a950e83944d0e53e251f5a0a228e354d9846ec85b75a0f897b459aefe566130fe3c3239d485b0ccabc3bc204588f969e7b06451ac01f4dffa8be430de1f
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLroB4/CFsrdn0A9lsy4:vvw9816vhKQLroB4/wQH9lsl
- TLSH T1D0535C834BEE98F2F7D20131056D8A798277ADC4961EBEAF7F50CE54017B191D83A14B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE