General
- Target 2026-08-18_56607266656d97c8b1a6c4ae68e267c5_elex_wannacry
- Size 60KB
- Sample260818-whp7csaf24
- SHA256 bbe1e308514ae6582d25fb8fe0bbfb4387712d547d715d4dd38c968c32700770
- MD5 56607266656d97c8b1a6c4ae68e267c5
- SHA1 82c15728834f4f9e09e9975596fd64c597efcd40
- SHA512 6b3fad125feaf000f67bdde3bd0ad6fa7317d8a7e9cb5b73c72a78be259783f87c0beddc9b62d387807a39331ce100179cee8b27fdc5c88dd4ad5d959f207e65
- SSDEEP 192:pbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwvY04/CFxyNhoy5t:pbLwOs8AHsc4sMfwhKQLroB4/CFsrd
- TLSH T14653F8834BDE5CF2F691123108798AB9927B9AD4950EBEDFBF90CD150037292E53A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-18_56607266656d97c8b1a6c4ae68e267c5_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_56607266656d97c8b1a6c4ae68e267c5_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_56607266656d97c8b1a6c4ae68e267c5_elex_wannacry
- Size 60KB
- SHA256 bbe1e308514ae6582d25fb8fe0bbfb4387712d547d715d4dd38c968c32700770
- MD5 56607266656d97c8b1a6c4ae68e267c5
- SHA1 82c15728834f4f9e09e9975596fd64c597efcd40
- SHA512 6b3fad125feaf000f67bdde3bd0ad6fa7317d8a7e9cb5b73c72a78be259783f87c0beddc9b62d387807a39331ce100179cee8b27fdc5c88dd4ad5d959f207e65
- SSDEEP 192:pbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwvY04/CFxyNhoy5t:pbLwOs8AHsc4sMfwhKQLroB4/CFsrd
- TLSH T14653F8834BDE5CF2F691123108798AB9927B9AD4950EBEDFBF90CD150037292E53A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE