General
- Target 2026-08-19_3c114dd132de6f44895fd186319828f7_elex_wannacry
- Size 18KB
- Sample260819-21g7csvglf
- SHA256 dcd63de79f322c22233f1a60bb23e30199a7453f077aeb307c239b65b5d4bee8
- MD5 3c114dd132de6f44895fd186319828f7
- SHA1 fe391ef1d461aeebb29a6a1fc2a7489c8f77b946
- SHA512 c776835902af6cbd91a6b05f348551917b467bf253750714cc54cc4721571f0d91b113e52e43a7c0294dbea82000f9ad710e1c0fe182b4d66a58069ab6df6a89
- SSDEEP 384:vLoUqhdO7+eN6GWl1pcG4rAAAAAHZMHBfTwEoP//lMngaNU:vLoZWN6GGBZ2BbwEoP/NUgaNU
- TLSH T16B8252394FC24AB6F373CAB284F797D6EA31F5A3F4120A0DD58507068913742AD85DAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-19_3c114dd132de6f44895fd186319828f7_elex_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_3c114dd132de6f44895fd186319828f7_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_3c114dd132de6f44895fd186319828f7_elex_wannacry
- Size 18KB
- SHA256 dcd63de79f322c22233f1a60bb23e30199a7453f077aeb307c239b65b5d4bee8
- MD5 3c114dd132de6f44895fd186319828f7
- SHA1 fe391ef1d461aeebb29a6a1fc2a7489c8f77b946
- SHA512 c776835902af6cbd91a6b05f348551917b467bf253750714cc54cc4721571f0d91b113e52e43a7c0294dbea82000f9ad710e1c0fe182b4d66a58069ab6df6a89
- SSDEEP 384:vLoUqhdO7+eN6GWl1pcG4rAAAAAHZMHBfTwEoP//lMngaNU:vLoZWN6GGBZ2BbwEoP/NUgaNU
- TLSH T16B8252394FC24AB6F373CAB284F797D6EA31F5A3F4120A0DD58507068913742AD85DAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Waski payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE