52d3a0ebb560924d36cdff024f2b022c32e6410874fad5360ee835d331925769

Analysis

max time kernel
150s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/08/2026, 04:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-18_f86f9bd9e3c08cb10afb36b6783bb302_elex_wannacry.exe
Size 609KB
Sample260818-fbgnmsfd45
SHA256 52d3a0ebb560924d36cdff024f2b022c32e6410874fad5360ee835d331925769
MD5 f86f9bd9e3c08cb10afb36b6783bb302
SHA1 5c6bc695bcdc0dec94b788fc046f0fcca4999a09
SHA512 b15e57e23356de49ffe8c4bf1b15f63ceceda177abe5c9ea3c6212de82347ee763273e5630effbdff468aacd67f8194115c746b19b56d49c69bba682e151509a
SSDEEP 12288:22Sllc1kxz8zwPB6uZD2V+ZCOn8Srlw73W+IZuns+HuHWRrF:BSl2iN8sPB6U2V+ZCOnzejW+IR+1R
TLSH
T1D7D4231ABED6EC34D4D646F15EB3AEEE212CF7C241601D2BCA810D557CB01E92B319DA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2704	6052	WerFault.exe	87

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-08-18_f86f9bd9e3c08cb10afb36b6783bb302_elex_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-18_f86f9bd9e3c08cb10afb36b6783bb302_elex_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-18_f86f9bd9e3c08cb10afb36b6783bb302_elex_wannacry.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:6052
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 6052 -s 452
  2⤵
  - Program crash
  PID:2704

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 484 -p 6052 -ip 6052
1⤵
PID:4732

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/6052-0-0x0000000000400000-0x000000000042D000-memory.dmp

Download

memory/6052-1-0x0000000000400000-0x000000000042D000-memory.dmp