General
- Target 2026-08-17_38949ab4f2171c9ceaba31dcb9647a14_elex_wannacry
- Size 84KB
- Sample260817-csjyjshb37
- SHA256 c5ac3e82deede11e354519488848a874f509970841a1b0843b7494a844d9d968
- MD5 38949ab4f2171c9ceaba31dcb9647a14
- SHA1 298e1f45636f558500cbf55eb1226f868bfceebd
- SHA512 1e84b6b270af6a0dba8ddeed8f7d6accbcebff721a4ac8681da58df4b6f7da0bee79b69db9217e083795948e174129b865e4380ebaa8a50eb24c8db317e73583
- SSDEEP 768:svw9816vhKQLrou4/wQWdYiJdYrJhdYrJosTX0udYrJosTVsTev:MEGh0oullZCJvCJXX0SCJXuev
- TLSH T19C831A5372DC5CF3F1A623382973AF674D42BB90050A3B525AC08A8F499C9D7DA2C34B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-17_38949ab4f2171c9ceaba31dcb9647a14_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_38949ab4f2171c9ceaba31dcb9647a14_elex_wannacry.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_38949ab4f2171c9ceaba31dcb9647a14_elex_wannacry
- Size 84KB
- SHA256 c5ac3e82deede11e354519488848a874f509970841a1b0843b7494a844d9d968
- MD5 38949ab4f2171c9ceaba31dcb9647a14
- SHA1 298e1f45636f558500cbf55eb1226f868bfceebd
- SHA512 1e84b6b270af6a0dba8ddeed8f7d6accbcebff721a4ac8681da58df4b6f7da0bee79b69db9217e083795948e174129b865e4380ebaa8a50eb24c8db317e73583
- SSDEEP 768:svw9816vhKQLrou4/wQWdYiJdYrJhdYrJosTX0udYrJosTVsTev:MEGh0oullZCJvCJXX0SCJXuev
- TLSH T19C831A5372DC5CF3F1A623382973AF674D42BB90050A3B525AC08A8F499C9D7DA2C34B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE