General
- Target 2026-08-19_397cf2ad30f27c054767d6851f9f6f75_elex_wannacry
- Size 59KB
- Sample260819-gqlftadc99
- SHA256 8cb279cbabc902784ef2e33e5c54921948df0196f798a2805ff6700d2a64431f
- MD5 397cf2ad30f27c054767d6851f9f6f75
- SHA1 f7c7ca8a7ed400b838ada2ec10dae029e6a4c20c
- SHA512 3ea94432041fc9ed708a241e76e12394e33b6bbc4702a7ad2ccec6cd82912791455a99786ad787f598a39cbd06ae3fd5722b98a663814f8761f6713916d07758
- SSDEEP 384:MbLwOs8AHsc4sMfwhKQLrojXP3U4/CFsrcGIiXY1nhbHQn:Mvw9816vhKQLrojXfU4/wQDIi4dHQ
- TLSH T1F2436D830FE948F2F7911171017D5BB9627BAAC0D209BEDB7F80DE28517B242E53E14A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-19_397cf2ad30f27c054767d6851f9f6f75_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_397cf2ad30f27c054767d6851f9f6f75_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_397cf2ad30f27c054767d6851f9f6f75_elex_wannacry
- Size 59KB
- SHA256 8cb279cbabc902784ef2e33e5c54921948df0196f798a2805ff6700d2a64431f
- MD5 397cf2ad30f27c054767d6851f9f6f75
- SHA1 f7c7ca8a7ed400b838ada2ec10dae029e6a4c20c
- SHA512 3ea94432041fc9ed708a241e76e12394e33b6bbc4702a7ad2ccec6cd82912791455a99786ad787f598a39cbd06ae3fd5722b98a663814f8761f6713916d07758
- SSDEEP 384:MbLwOs8AHsc4sMfwhKQLrojXP3U4/CFsrcGIiXY1nhbHQn:Mvw9816vhKQLrojXfU4/wQDIi4dHQ
- TLSH T1F2436D830FE948F2F7911171017D5BB9627BAAC0D209BEDB7F80DE28517B242E53E14A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE