General
- Target 2026-08-16_1c46a363ac1d3f9d2b9799496d7c48a7_elex_wannacry
- Size 59KB
- Sample260817-bbb1ya1tby
- SHA256 d1f97adc7ba78cc96823f8ffcabf1bfbaa5b7b230348e2749e229c1ab0cae51a
- MD5 1c46a363ac1d3f9d2b9799496d7c48a7
- SHA1 ab175fa9e539a4dffd5e766ff5aeab1628472344
- SHA512 050e96bca9e932e1ecd7217aa403dff03e36a2dbfccd270a6289f21328c994b7aee59a3d793afe9a8cc1c3d8e9f6051556630ff6d45fccf7dc7713ab0a8b7c74
- SSDEEP 384:MbLwOs8AHsc4sMfwhKQLrojXP3c4/CFsrcGIiXY1nhbHQn:Mvw9816vhKQLrojXfc4/wQDIi4dHQ
- TLSH T16E436C830BE94CF2F7911171017D5BB9627BAAC0D209BEDB7F80DE28517B242E53E14A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-16_1c46a363ac1d3f9d2b9799496d7c48a7_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_1c46a363ac1d3f9d2b9799496d7c48a7_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_1c46a363ac1d3f9d2b9799496d7c48a7_elex_wannacry
- Size 59KB
- SHA256 d1f97adc7ba78cc96823f8ffcabf1bfbaa5b7b230348e2749e229c1ab0cae51a
- MD5 1c46a363ac1d3f9d2b9799496d7c48a7
- SHA1 ab175fa9e539a4dffd5e766ff5aeab1628472344
- SHA512 050e96bca9e932e1ecd7217aa403dff03e36a2dbfccd270a6289f21328c994b7aee59a3d793afe9a8cc1c3d8e9f6051556630ff6d45fccf7dc7713ab0a8b7c74
- SSDEEP 384:MbLwOs8AHsc4sMfwhKQLrojXP3c4/CFsrcGIiXY1nhbHQn:Mvw9816vhKQLrojXfc4/wQDIi4dHQ
- TLSH T16E436C830BE94CF2F7911171017D5BB9627BAAC0D209BEDB7F80DE28517B242E53E14A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE