General
- Target 2026-08-19_a1b1aee30cb56fd82cba908ee83ad4fc_elex_wannacry
- Size 64KB
- Sample260819-wtppzafk3w
- SHA256 9c557ae3047e1cc7f4fe9f805066f76fe796759284de6d8acb7aeaaba1152417
- MD5 a1b1aee30cb56fd82cba908ee83ad4fc
- SHA1 dfce6ba4a45753c71fe749f7dc6dccd7e34bc197
- SHA512 6d48c8d5f47bb95101528b26629d222147333fd74ac70a4e766162b6772b9433b2a95e06a7a64df0ac5bd1875d7de04b2b0486b1fa0c1c24048589257b3701a8
- SSDEEP 192:VbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqw6EY04/CFxyNhoy5tT:VbLwOs8AHsc4sMfwhKQLro6y4/CFsrdT
- TLSH T13253414A269548A3F94EB1B83CE44D7C61AF55C050296B7AD7E0EB272327DE1D42F20F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-19_a1b1aee30cb56fd82cba908ee83ad4fc_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_a1b1aee30cb56fd82cba908ee83ad4fc_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_a1b1aee30cb56fd82cba908ee83ad4fc_elex_wannacry
- Size 64KB
- SHA256 9c557ae3047e1cc7f4fe9f805066f76fe796759284de6d8acb7aeaaba1152417
- MD5 a1b1aee30cb56fd82cba908ee83ad4fc
- SHA1 dfce6ba4a45753c71fe749f7dc6dccd7e34bc197
- SHA512 6d48c8d5f47bb95101528b26629d222147333fd74ac70a4e766162b6772b9433b2a95e06a7a64df0ac5bd1875d7de04b2b0486b1fa0c1c24048589257b3701a8
- SSDEEP 192:VbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqw6EY04/CFxyNhoy5tT:VbLwOs8AHsc4sMfwhKQLro6y4/CFsrdT
- TLSH T13253414A269548A3F94EB1B83CE44D7C61AF55C050296B7AD7E0EB272327DE1D42F20F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE