General
- Target 2026-08-20_6d91851d42a65e7f3bc1fc71c018c74d_elex_wannacry
- Size 59KB
- Sample260820-1m2s6swbrd
- SHA256 0cb21d7a80bade8d95ee353499f3c68360412d17b271efe58352efe6286bd62a
- MD5 6d91851d42a65e7f3bc1fc71c018c74d
- SHA1 0f28ea91df5601ece5b96673547645968b366ceb
- SHA512 8ed47eb8c01f7821f20697ecae12e4430b1d2fb08669a23a6d3b2d28c8469ca2a0d26424915ba0c3aaf5b5c0ed793860890a053cfdbe9febafd75846b4893376
- SSDEEP 384:MbLwOs8AHsc4sMfwhKQLroomaQU4/CFsrFJGlMlrWg:Mvw9816vhKQLroLaQU4/wQTGaW
- TLSH T1F3436B835BEA2CF2F7E1123205B846B5D22B9AD8911DBEDBBB90DE0504372D1D53F14A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-20_6d91851d42a65e7f3bc1fc71c018c74d_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_6d91851d42a65e7f3bc1fc71c018c74d_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_6d91851d42a65e7f3bc1fc71c018c74d_elex_wannacry
- Size 59KB
- SHA256 0cb21d7a80bade8d95ee353499f3c68360412d17b271efe58352efe6286bd62a
- MD5 6d91851d42a65e7f3bc1fc71c018c74d
- SHA1 0f28ea91df5601ece5b96673547645968b366ceb
- SHA512 8ed47eb8c01f7821f20697ecae12e4430b1d2fb08669a23a6d3b2d28c8469ca2a0d26424915ba0c3aaf5b5c0ed793860890a053cfdbe9febafd75846b4893376
- SSDEEP 384:MbLwOs8AHsc4sMfwhKQLroomaQU4/CFsrFJGlMlrWg:Mvw9816vhKQLroLaQU4/wQTGaW
- TLSH T1F3436B835BEA2CF2F7E1123205B846B5D22B9AD8911DBEDBBB90DE0504372D1D53F14A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE