General
- Target 2026-08-17_304a43d89a9d301e3e0c5299ff4cf4e0_elex_wannacry
- Size 17KB
- Sample260818-axy7xsbr2s
- SHA256 1a1912bb3541de83b80005aff9730fdfa1c344db02e504504c04bb293d55d775
- MD5 304a43d89a9d301e3e0c5299ff4cf4e0
- SHA1 2579f72b542642c849c5b218254de90c5758630f
- SHA512 b1f0f4869a6c2023fc9272ed9db4597ffa0427d49a8578316a5153ec3b52d870d434ce8f65c1b451cf3f0af5611f35fe408113bea83126afbce1106449c873f2
- SSDEEP 192:uTk5WckBezHYQRPK6k7TjHwCl1oynzc2Fjmf2mrETLLC0qmg+jjGiEloCFy3bPT:uTQWckBeEd6ml1pcg7F3GiElpiPT
- TLSH T1E472C5356BD45C73E3BBD7B195FBC1D66975B02A3B03592E80881B892C23B119DA0B8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-17_304a43d89a9d301e3e0c5299ff4cf4e0_elex_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_304a43d89a9d301e3e0c5299ff4cf4e0_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_304a43d89a9d301e3e0c5299ff4cf4e0_elex_wannacry
- Size 17KB
- SHA256 1a1912bb3541de83b80005aff9730fdfa1c344db02e504504c04bb293d55d775
- MD5 304a43d89a9d301e3e0c5299ff4cf4e0
- SHA1 2579f72b542642c849c5b218254de90c5758630f
- SHA512 b1f0f4869a6c2023fc9272ed9db4597ffa0427d49a8578316a5153ec3b52d870d434ce8f65c1b451cf3f0af5611f35fe408113bea83126afbce1106449c873f2
- SSDEEP 192:uTk5WckBezHYQRPK6k7TjHwCl1oynzc2Fjmf2mrETLLC0qmg+jjGiEloCFy3bPT:uTQWckBeEd6ml1pcg7F3GiElpiPT
- TLSH T1E472C5356BD45C73E3BBD7B195FBC1D66975B02A3B03592E80881B892C23B119DA0B8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Waski payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE