General
- Target 2026-08-19_e38be1fe2de3bcc82dcbef4e45538802_elex_upatre_wannacry
- Size 43KB
- Sample260819-jmpp6sfp4y
- SHA256 0dc4f49e53eba8b86bf0dd88bbabfdcbe29764e452e5929d6e5e069f1e4deca4
- MD5 e38be1fe2de3bcc82dcbef4e45538802
- SHA1 4cb2fdc45e7d3b4d3a95d86babe1b2573674f7fc
- SHA512 174c0f225f3adbcd099b918a3dc2de212a7d14db3326eca1c1de0f6f54822e902bd1474c7133d1fbd2d4c795e11a874ec8692fabcd5308849d4df066518c13d7
- SSDEEP 768:xW9+F8BPtYggggggLvggggggggUaocdvoknj3+eGj7:eaokbnzYH
- TLSH T1C713CC742AD41572E37B9E7685F251CEA96C7C233A03584E40B1F3440BF3BD2AEA1A5D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-19_e38be1fe2de3bcc82dcbef4e45538802_elex_upatre_wannacry.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_e38be1fe2de3bcc82dcbef4e45538802_elex_upatre_wannacry.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_e38be1fe2de3bcc82dcbef4e45538802_elex_upatre_wannacry
- Size 43KB
- SHA256 0dc4f49e53eba8b86bf0dd88bbabfdcbe29764e452e5929d6e5e069f1e4deca4
- MD5 e38be1fe2de3bcc82dcbef4e45538802
- SHA1 4cb2fdc45e7d3b4d3a95d86babe1b2573674f7fc
- SHA512 174c0f225f3adbcd099b918a3dc2de212a7d14db3326eca1c1de0f6f54822e902bd1474c7133d1fbd2d4c795e11a874ec8692fabcd5308849d4df066518c13d7
- SSDEEP 768:xW9+F8BPtYggggggLvggggggggUaocdvoknj3+eGj7:eaokbnzYH
- TLSH T1C713CC742AD41572E37B9E7685F251CEA96C7C233A03584E40B1F3440BF3BD2AEA1A5D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE