General
- Target 2026-08-16_bf767a6f629bf0e9cfab619b2b6f4a3c_elex_wannacry
- Size 59KB
- Sample260816-l1vvfsvxat
- SHA256 72dce813640f7139a52c0e2d96fc0206f2f9bd4efc9799b3c9528b72e387c52f
- MD5 bf767a6f629bf0e9cfab619b2b6f4a3c
- SHA1 04438b4860737c1845565ee5c671bf218dcd5fd2
- SHA512 ffb8412dd1151bf3b3436fbe2c08261137e4c5e5c1705cc1cb193f7a4bca6726b0f522ccc62e45cc01c1e8a8456a331a60ee1cc139f28fda1a12a14e5bfffce5
- SSDEEP 384:MbLwOs8AHsc4sMfwhKQLrojXP3d4/CFsrcGIiXY1nhbHQn:Mvw9816vhKQLrojXfd4/wQDIi4dHQ
- TLSH T1B9436D830FE948F2F7911171057D5BB9627BAAC0D209BEDB7F80DE28517B242E53E14A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-16_bf767a6f629bf0e9cfab619b2b6f4a3c_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_bf767a6f629bf0e9cfab619b2b6f4a3c_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_bf767a6f629bf0e9cfab619b2b6f4a3c_elex_wannacry
- Size 59KB
- SHA256 72dce813640f7139a52c0e2d96fc0206f2f9bd4efc9799b3c9528b72e387c52f
- MD5 bf767a6f629bf0e9cfab619b2b6f4a3c
- SHA1 04438b4860737c1845565ee5c671bf218dcd5fd2
- SHA512 ffb8412dd1151bf3b3436fbe2c08261137e4c5e5c1705cc1cb193f7a4bca6726b0f522ccc62e45cc01c1e8a8456a331a60ee1cc139f28fda1a12a14e5bfffce5
- SSDEEP 384:MbLwOs8AHsc4sMfwhKQLrojXP3d4/CFsrcGIiXY1nhbHQn:Mvw9816vhKQLrojXfd4/wQDIi4dHQ
- TLSH T1B9436D830FE948F2F7911171057D5BB9627BAAC0D209BEDB7F80DE28517B242E53E14A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE