General
- Target 2026-08-16_d01894dabb014a8d0c0f443807c1166a_elex_wannacry
- Size 64KB
- Sample260816-25mmmsgd82
- SHA256 4c225d1b2ee44cb9fbc0cc5f06d10501f03b656c929a0cde08082e594f11811f
- MD5 d01894dabb014a8d0c0f443807c1166a
- SHA1 5d856188efe495ac007edf3ec0c2ca552417980c
- SHA512 2cc4fdfd7ff627cdeecee89fe0686e797fab595fd30d2eea1fc88d7e8ad589c44b5946557db630ec00b10cd2626481775d1734183e9b53a6e8c150405725d570
- SSDEEP 192:ObOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwjY04/CFxyNhoy5tT:ObLwOs8AHsc4sMfwhKQLrol4/CFsrdT
- TLSH T1D053414A269944A3F94EB1B82CE44D7C61AF55C050296B7ED7E0EB272327DE1D42F20F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-16_d01894dabb014a8d0c0f443807c1166a_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_d01894dabb014a8d0c0f443807c1166a_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_d01894dabb014a8d0c0f443807c1166a_elex_wannacry
- Size 64KB
- SHA256 4c225d1b2ee44cb9fbc0cc5f06d10501f03b656c929a0cde08082e594f11811f
- MD5 d01894dabb014a8d0c0f443807c1166a
- SHA1 5d856188efe495ac007edf3ec0c2ca552417980c
- SHA512 2cc4fdfd7ff627cdeecee89fe0686e797fab595fd30d2eea1fc88d7e8ad589c44b5946557db630ec00b10cd2626481775d1734183e9b53a6e8c150405725d570
- SSDEEP 192:ObOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwjY04/CFxyNhoy5tT:ObLwOs8AHsc4sMfwhKQLrol4/CFsrdT
- TLSH T1D053414A269944A3F94EB1B82CE44D7C61AF55C050296B7ED7E0EB272327DE1D42F20F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE