General
- Target 2026-08-20_df7eef76fcfa8811134821a33bbe6049_elex_wannacry
- Size 15KB
- Sample260820-264ybagc22
- SHA256 5f41990b7db6ab1c2906ac3696f0643610da4cfed140b8d6eec7c415709f4319
- MD5 df7eef76fcfa8811134821a33bbe6049
- SHA1 b1640ff2e61260b62b2830d3d72f9447be3e46c4
- SHA512 ec1e9f7f8a3a35658ea66c32b63a50b75c3e7d0156293909d474a45b35e09f9727aeb0059f80f7c05c5efa2e63f91ee0d8ce0bcc3c2001b022c28e0652f19915
- SSDEEP 192:uTk5WckBezHYQRPK6k7TjHwCl1oynzc2Fjmf2mrETLLC0qmg+jjGimeczt4fooN2:uTQWckBeEd6ml1pcg7F3GiG2lVCL/3D
- TLSH T1B562B4315BC51DB3E3BBD3F295FBC29A5865B02EA3039A3F94482F4979235018C95ED8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-20_df7eef76fcfa8811134821a33bbe6049_elex_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_df7eef76fcfa8811134821a33bbe6049_elex_wannacry.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_df7eef76fcfa8811134821a33bbe6049_elex_wannacry
- Size 15KB
- SHA256 5f41990b7db6ab1c2906ac3696f0643610da4cfed140b8d6eec7c415709f4319
- MD5 df7eef76fcfa8811134821a33bbe6049
- SHA1 b1640ff2e61260b62b2830d3d72f9447be3e46c4
- SHA512 ec1e9f7f8a3a35658ea66c32b63a50b75c3e7d0156293909d474a45b35e09f9727aeb0059f80f7c05c5efa2e63f91ee0d8ce0bcc3c2001b022c28e0652f19915
- SSDEEP 192:uTk5WckBezHYQRPK6k7TjHwCl1oynzc2Fjmf2mrETLLC0qmg+jjGimeczt4fooN2:uTQWckBeEd6ml1pcg7F3GiG2lVCL/3D
- TLSH T1B562B4315BC51DB3E3BBD3F295FBC29A5865B02EA3039A3F94482F4979235018C95ED8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Waski payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE