5f391b7751c5408f1c3a6c564da9535435a8e2470dd2ea7c4e150e0b1ac0af53

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/08/2026, 22:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-16_0609cda78270294aa3921ce64112f77a_elex_wannacry.exe
Size 56KB
Sample260816-14nymsgc72
SHA256 5f391b7751c5408f1c3a6c564da9535435a8e2470dd2ea7c4e150e0b1ac0af53
MD5 0609cda78270294aa3921ce64112f77a
SHA1 5687dd92cddb2cf11e1951424ed4a928c1e5f381
SHA512 4c35112851ca381ec9e05ccb2b6e717eaf5fbd681d266164588a80b7966eb57d7be3f85adc939a2f39289681c8ce2ad71e13ccbb8599737f458c918286fc1405
SSDEEP 768:qyieWeNzb4rbC/4RNSq6Ttb4Rox2wyOWvDZClhY6uxvahvAqpy3bLaW1hPt9b:qGaK4RNx6Bb4RoIw8E+FBvdltl
TLSH
T128433BCF7BA9CADBE2204C71C06417F742675CA9EB20579B4381FD58B432CC1AC3652A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-08-16_0609cda78270294aa3921ce64112f77a_elex_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-16_0609cda78270294aa3921ce64112f77a_elex_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-16_0609cda78270294aa3921ce64112f77a_elex_wannacry.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:5512

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/5512-0-0x0000000000400000-0x0000000000425000-memory.dmp

Download