General
- Target 2026-08-16_606ea0452f078a1cdd97d64b1c57f1f2_elex_wannacry
- Size 84KB
- Sample260816-rm44vscp9v
- SHA256 8933238212d0d7d4839f834b39d3800e79180fe8b390e38ef3a6cf19861e0100
- MD5 606ea0452f078a1cdd97d64b1c57f1f2
- SHA1 053d0b4d31dcc1e8b607b6f14a87752dff965912
- SHA512 e1ae558bb1810019a5866d0f4e1bffec2a0e0b32a2afdc0cc96774c371aea5b0a4358cf28a1a4434e2e260dd6c9796bf35cb5223fc1583479b79ed194e8df5e4
- SSDEEP 768:svw9816vhKQLroL4/wQWdYiJdYrJhdYrJosTX0udYrJosTVsTev:MEGh0oLllZCJvCJXX0SCJXuev
- TLSH T132831A5372DC5CF3F1A623382977AB674D42BB90050A3B525AC08A8F499D9D7DA2C347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-16_606ea0452f078a1cdd97d64b1c57f1f2_elex_wannacry.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_606ea0452f078a1cdd97d64b1c57f1f2_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_606ea0452f078a1cdd97d64b1c57f1f2_elex_wannacry
- Size 84KB
- SHA256 8933238212d0d7d4839f834b39d3800e79180fe8b390e38ef3a6cf19861e0100
- MD5 606ea0452f078a1cdd97d64b1c57f1f2
- SHA1 053d0b4d31dcc1e8b607b6f14a87752dff965912
- SHA512 e1ae558bb1810019a5866d0f4e1bffec2a0e0b32a2afdc0cc96774c371aea5b0a4358cf28a1a4434e2e260dd6c9796bf35cb5223fc1583479b79ed194e8df5e4
- SSDEEP 768:svw9816vhKQLroL4/wQWdYiJdYrJhdYrJosTX0udYrJosTVsTev:MEGh0oLllZCJvCJXX0SCJXuev
- TLSH T132831A5372DC5CF3F1A623382977AB674D42BB90050A3B525AC08A8F499D9D7DA2C347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE