General
- Target 2026-08-17_ab0851600455ee909c3c1aa2e21e2e1b_elex_wannacry
- Size 84KB
- Sample260818-aa4h5abl4t
- SHA256 8bd2dee4170730fa7ea7dc3d933cb896a99866b13346ec48c1ed866cbf14f396
- MD5 ab0851600455ee909c3c1aa2e21e2e1b
- SHA1 6c7a6a872fa3ca39ac77ad87ec388a468c72645a
- SHA512 59bb88046b833f4a9fef785ae7e5031e77f44b6074e4be4b7d68e7ca7e2c5f045af70fd30afd612670c03077fc2ddedd246dc5141e56575df0f74f0e75422c3e
- SSDEEP 768:svw9816vhKQLrot4/wQWdYiJdYrJhdYrJosTX0udYrJosTVsTev:MEGh0otllZCJvCJXX0SCJXuev
- TLSH T1F3830A5372DC5CF3F1A623382973AF678D42BB90050A3B525AC08A8F499D9D7D62C357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-17_ab0851600455ee909c3c1aa2e21e2e1b_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_ab0851600455ee909c3c1aa2e21e2e1b_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_ab0851600455ee909c3c1aa2e21e2e1b_elex_wannacry
- Size 84KB
- SHA256 8bd2dee4170730fa7ea7dc3d933cb896a99866b13346ec48c1ed866cbf14f396
- MD5 ab0851600455ee909c3c1aa2e21e2e1b
- SHA1 6c7a6a872fa3ca39ac77ad87ec388a468c72645a
- SHA512 59bb88046b833f4a9fef785ae7e5031e77f44b6074e4be4b7d68e7ca7e2c5f045af70fd30afd612670c03077fc2ddedd246dc5141e56575df0f74f0e75422c3e
- SSDEEP 768:svw9816vhKQLrot4/wQWdYiJdYrJhdYrJosTX0udYrJosTVsTev:MEGh0otllZCJvCJXX0SCJXuev
- TLSH T1F3830A5372DC5CF3F1A623382973AF678D42BB90050A3B525AC08A8F499D9D7D62C357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE