General
- Target 2026-08-20_e9b90239b62c4700eab47e1e61f3c5f5_elex_wannacry
- Size 59KB
- Sample260820-csy3gaba47
- SHA256 dc30edd08181e1391b5775d65a91d36591d5c119715a53d3b3c4e99694b90fb5
- MD5 e9b90239b62c4700eab47e1e61f3c5f5
- SHA1 80bc58bb3a34b245101479262f355ec64cad0bd9
- SHA512 bd5960442f9391caafde0506a1b4f0d70bdaf85d77df67eed49e82212d31174c4c2f14545d0dd6bf64b3c0e1b9c49ab6c84ea8a4be54ff1d581104a8fee23319
- SSDEEP 192:MbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwak5Y04/CFxyNhoy5t:MbLwOs8AHsc4sMfwhKQLroXL4/CFsrd
- TLSH T15E43F7834BEE9CF2F691117108798AB9927B99D4950EBE9FBB90CD150037292E53A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-20_e9b90239b62c4700eab47e1e61f3c5f5_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_e9b90239b62c4700eab47e1e61f3c5f5_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_e9b90239b62c4700eab47e1e61f3c5f5_elex_wannacry
- Size 59KB
- SHA256 dc30edd08181e1391b5775d65a91d36591d5c119715a53d3b3c4e99694b90fb5
- MD5 e9b90239b62c4700eab47e1e61f3c5f5
- SHA1 80bc58bb3a34b245101479262f355ec64cad0bd9
- SHA512 bd5960442f9391caafde0506a1b4f0d70bdaf85d77df67eed49e82212d31174c4c2f14545d0dd6bf64b3c0e1b9c49ab6c84ea8a4be54ff1d581104a8fee23319
- SSDEEP 192:MbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwak5Y04/CFxyNhoy5t:MbLwOs8AHsc4sMfwhKQLroXL4/CFsrd
- TLSH T15E43F7834BEE9CF2F691117108798AB9927B99D4950EBE9FBB90CD150037292E53A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE