General
- Target 2026-08-19_aea1d7d390256d4776b0a5ab8c44664b_elex_wannacry
- Size 64KB
- Sample260819-wkpcvaer7w
- SHA256 40d78a7ac909a589c69d0d3fea2533d69c8be32d33ec281aa103b9a7143f9cc7
- MD5 aea1d7d390256d4776b0a5ab8c44664b
- SHA1 f085bac8e6c3937827be9dff72389abf602d5a11
- SHA512 62070c83b690c63881cf6e85a5bd31aae5f2acea42c046575b8f77ba3a9412e82b63fa9e66e2b515c80ffcd644b039d13eb1c38458424e5b13d16b4bfac602c3
- SSDEEP 192:ObOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwJY04/CFxyNhoy5tT:ObLwOs8AHsc4sMfwhKQLro74/CFsrdT
- TLSH T1C753514A269954A3F94EB1B82CE44D7C61AF55C040296B7ED7E0EB272327DE1D42F20F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-19_aea1d7d390256d4776b0a5ab8c44664b_elex_wannacry.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_aea1d7d390256d4776b0a5ab8c44664b_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_aea1d7d390256d4776b0a5ab8c44664b_elex_wannacry
- Size 64KB
- SHA256 40d78a7ac909a589c69d0d3fea2533d69c8be32d33ec281aa103b9a7143f9cc7
- MD5 aea1d7d390256d4776b0a5ab8c44664b
- SHA1 f085bac8e6c3937827be9dff72389abf602d5a11
- SHA512 62070c83b690c63881cf6e85a5bd31aae5f2acea42c046575b8f77ba3a9412e82b63fa9e66e2b515c80ffcd644b039d13eb1c38458424e5b13d16b4bfac602c3
- SSDEEP 192:ObOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwJY04/CFxyNhoy5tT:ObLwOs8AHsc4sMfwhKQLro74/CFsrdT
- TLSH T1C753514A269954A3F94EB1B82CE44D7C61AF55C040296B7ED7E0EB272327DE1D42F20F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE