General
- Target 2026-08-18_44c2e8d4f4ab95bd69e2a02a78b18a2a_elex_wannacry
- Size 84KB
- Sample260818-wpkv8axepc
- SHA256 c0488eebdebd3fec66f5da738ff918ebdb6ae3fc24ead6236341c0be1caefba8
- MD5 44c2e8d4f4ab95bd69e2a02a78b18a2a
- SHA1 f2fd3db3885331584ec8f75903337fb2ee323946
- SHA512 3e4641e76064d4ee11da000e7c13885111acf909eae8303dd28e97db9ddaf1866d885c77d285ca7c5ef0a1e2f749bad1c3bcbb6fa287e33663ff3fb6df01e855
- SSDEEP 768:svw9816vhKQLroB4/wQWdYiJdYrJhdYrJosTX0udYrJosTVsTev:MEGh0oBllZCJvCJXX0SCJXuev
- TLSH T183831A5372DC5CF3F1A623382973AF674D42BB90050A3B525AC08A8F499D9D7DA2C35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-18_44c2e8d4f4ab95bd69e2a02a78b18a2a_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_44c2e8d4f4ab95bd69e2a02a78b18a2a_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_44c2e8d4f4ab95bd69e2a02a78b18a2a_elex_wannacry
- Size 84KB
- SHA256 c0488eebdebd3fec66f5da738ff918ebdb6ae3fc24ead6236341c0be1caefba8
- MD5 44c2e8d4f4ab95bd69e2a02a78b18a2a
- SHA1 f2fd3db3885331584ec8f75903337fb2ee323946
- SHA512 3e4641e76064d4ee11da000e7c13885111acf909eae8303dd28e97db9ddaf1866d885c77d285ca7c5ef0a1e2f749bad1c3bcbb6fa287e33663ff3fb6df01e855
- SSDEEP 768:svw9816vhKQLroB4/wQWdYiJdYrJhdYrJosTX0udYrJosTVsTev:MEGh0oBllZCJvCJXX0SCJXuev
- TLSH T183831A5372DC5CF3F1A623382973AF674D42BB90050A3B525AC08A8F499D9D7DA2C35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE