General
- Target 2026-08-17_64ccf01ba14b18f99b838fc0c4d1e744_elex_wannacry
- Size 64KB
- Sample260817-k7c3jsxxev
- SHA256 6ed1d7368bb934b0bd979ee71cc3dd6a2a55fe0247ddaa094a9f7b7ef1b43f1a
- MD5 64ccf01ba14b18f99b838fc0c4d1e744
- SHA1 921dc1509fecd44ff6af137b41fe9b4a63372b9d
- SHA512 303d203b17db46e8a046c7095c44db6d76959b2f1d3eaeab34f60a1855321861b719c9c6b20fe69c3cee9d8ce35e1d9bc7f003d68f2a9059f20ad837f4886393
- SSDEEP 192:ObOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwE+Y04/CFxyNhoy5tT:ObLwOs8AHsc4sMfwhKQLrol4/CFsrdT
- TLSH T16553414A269544A3F94EB1B82CE44D7C61AF55C050296B7EE7E0EB232327DE1D42F20F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-17_64ccf01ba14b18f99b838fc0c4d1e744_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_64ccf01ba14b18f99b838fc0c4d1e744_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_64ccf01ba14b18f99b838fc0c4d1e744_elex_wannacry
- Size 64KB
- SHA256 6ed1d7368bb934b0bd979ee71cc3dd6a2a55fe0247ddaa094a9f7b7ef1b43f1a
- MD5 64ccf01ba14b18f99b838fc0c4d1e744
- SHA1 921dc1509fecd44ff6af137b41fe9b4a63372b9d
- SHA512 303d203b17db46e8a046c7095c44db6d76959b2f1d3eaeab34f60a1855321861b719c9c6b20fe69c3cee9d8ce35e1d9bc7f003d68f2a9059f20ad837f4886393
- SSDEEP 192:ObOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwE+Y04/CFxyNhoy5tT:ObLwOs8AHsc4sMfwhKQLrol4/CFsrdT
- TLSH T16553414A269544A3F94EB1B82CE44D7C61AF55C050296B7EE7E0EB232327DE1D42F20F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE