General
- Target 2026-08-19_ae8b140b6f10b4c4b9a6d609cb246d22_elex_wannacry
- Size 39KB
- Sample260819-16bfbsxvew
- SHA256 6fa96a8441dfd5898a2bd88b5d793a22553b8dd809cfb0f079127ab8dfaa9569
- MD5 ae8b140b6f10b4c4b9a6d609cb246d22
- SHA1 a9c72813bd048c4df72bfe12be995e92fa60edb6
- SHA512 c85714631df875f3aa5721290669d9c94745dfd8d90b95917a2db304d9062472b6c65233ab984e62938c6f8bf6a530aae8d6822bb78a0aaa786a32336ff00ab3
- SSDEEP 384:I8/JYSrFQjGezfNHP1zZYpMYUzMk9hBcecy0rtGzLfRHjBDZKbJCT+v4WP0Lk0uM:F/3ed1zZN/zoy0rtsVN6ITo0LN
- TLSH T1CF0343B99FC409B6D673DEB9C5F265C3B822B01A7D16980D04D22B061E23B53FDA254F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-19_ae8b140b6f10b4c4b9a6d609cb246d22_elex_wannacry.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_ae8b140b6f10b4c4b9a6d609cb246d22_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_ae8b140b6f10b4c4b9a6d609cb246d22_elex_wannacry
- Size 39KB
- SHA256 6fa96a8441dfd5898a2bd88b5d793a22553b8dd809cfb0f079127ab8dfaa9569
- MD5 ae8b140b6f10b4c4b9a6d609cb246d22
- SHA1 a9c72813bd048c4df72bfe12be995e92fa60edb6
- SHA512 c85714631df875f3aa5721290669d9c94745dfd8d90b95917a2db304d9062472b6c65233ab984e62938c6f8bf6a530aae8d6822bb78a0aaa786a32336ff00ab3
- SSDEEP 384:I8/JYSrFQjGezfNHP1zZYpMYUzMk9hBcecy0rtGzLfRHjBDZKbJCT+v4WP0Lk0uM:F/3ed1zZN/zoy0rtsVN6ITo0LN
- TLSH T1CF0343B99FC409B6D673DEB9C5F265C3B822B01A7D16980D04D22B061E23B53FDA254F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE