General
- Target 2026-08-17_b0683881967234fb94ec3689f6ce8249_elex_wannacry
- Size 60KB
- Sample260817-ccry8aha45
- SHA256 651f24da130e57f8d0c94d21d933f03a50d73f099634b8b421d8f34960a4cd7c
- MD5 b0683881967234fb94ec3689f6ce8249
- SHA1 4d23daad602629a469376b06f5c054bfc9344853
- SHA512 f8d4e217bc5c717c03ba37f419d94cd3e7a1488ee0be85b6c41b0ee28f62998d35300ec9bafe6d5ff7732f2615e3e0c3ae41fd9ad20f72165f02af805d73c03d
- SSDEEP 192:pbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwMY04/CFxyNhoy5t:pbLwOs8AHsc4sMfwhKQLro64/CFsrd
- TLSH T1175309834BDE5CF2F791123108798AB9927BA9C4950EBEDFBF90CD554037292E53A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-17_b0683881967234fb94ec3689f6ce8249_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_b0683881967234fb94ec3689f6ce8249_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_b0683881967234fb94ec3689f6ce8249_elex_wannacry
- Size 60KB
- SHA256 651f24da130e57f8d0c94d21d933f03a50d73f099634b8b421d8f34960a4cd7c
- MD5 b0683881967234fb94ec3689f6ce8249
- SHA1 4d23daad602629a469376b06f5c054bfc9344853
- SHA512 f8d4e217bc5c717c03ba37f419d94cd3e7a1488ee0be85b6c41b0ee28f62998d35300ec9bafe6d5ff7732f2615e3e0c3ae41fd9ad20f72165f02af805d73c03d
- SSDEEP 192:pbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwMY04/CFxyNhoy5t:pbLwOs8AHsc4sMfwhKQLro64/CFsrd
- TLSH T1175309834BDE5CF2F791123108798AB9927BA9C4950EBEDFBF90CD554037292E53A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE