Analysis
- max time kernel
148s - max time network
144s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
17/08/2026, 00:42
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_6bbb1dc66322086d4eb1489b47c2b6b8_elex_wannacry.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_6bbb1dc66322086d4eb1489b47c2b6b8_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target 2026-08-16_6bbb1dc66322086d4eb1489b47c2b6b8_elex_wannacry.exe
- Size 352KB
- Sample260817-a2l36agg33
- SHA256 630fe486a4556e4d38d2d0d371e09bba1331128e4882c2e3c99ae1b8ee5df9ac
- MD5 6bbb1dc66322086d4eb1489b47c2b6b8
- SHA1 3b486fc9b0dd38f96e3d8c14806acfe30a906238
- SHA512 dfc1fc59f2919bd66816ad6b1a3c9f03a23642650384db698d1acf326b9e165c293deee6aa10e2dec40230ad7f71a9c412c0fd63595d04b8d5750b15db56e4fe
- SSDEEP 6144:sn7ajwgNlvnUJj65VFh0ICD32LPDZ9oLRHLichJTPRoRbcXU5HUmUGlaXZxZZBv8:snOjwstR66
- TLSH T1307409AE545B5131E7BD1976DAFC66BB2331679D42F44C236B10E9889C0302BF81E9BC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
description ioc Process File opened for modification \??\PhysicalDrive0 2026-08-16_6bbb1dc66322086d4eb1489b47c2b6b8_elex_wannacry.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-16_6bbb1dc66322086d4eb1489b47c2b6b8_elex_wannacry.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3332 2026-08-16_6bbb1dc66322086d4eb1489b47c2b6b8_elex_wannacry.exe 3332 2026-08-16_6bbb1dc66322086d4eb1489b47c2b6b8_elex_wannacry.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-16_6bbb1dc66322086d4eb1489b47c2b6b8_elex_wannacry.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-16_6bbb1dc66322086d4eb1489b47c2b6b8_elex_wannacry.exe"1⤵
- Writes to the Master Boot Record (MBR)
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:3332