General
- Target 2026-08-20_1060832c7f4eaa3a1b6e491ea6989cb7_elex_wannacry
- Size 84KB
- Sample260820-h6d74ssbpf
- SHA256 b7fda0ee2b1469ab9045017965a2905ca2a4ba386fd6c63a9b4f89514380621a
- MD5 1060832c7f4eaa3a1b6e491ea6989cb7
- SHA1 565eb62c8adc4be5b6e8ac3091f3d8bdedf18e14
- SHA512 6b697d0640752de21f4adedf8b95dbc9f47dfb511502be863700fb771e369984332184be7075d71ebd90eb44a71d64f08e3deb48d3b4d7379b0431369b4eb02e
- SSDEEP 768:svw9816vhKQLrok4/wQWdYiJdYrJhdYrJosTX0udYrJosTVsTev:MEGh0okllZCJvCJXX0SCJXuev
- TLSH T1B3830A5372DC5CF3F1A623382977AF674D42BB90050A3B525AC08A8F499C9D7DA2C35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-20_1060832c7f4eaa3a1b6e491ea6989cb7_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_1060832c7f4eaa3a1b6e491ea6989cb7_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_1060832c7f4eaa3a1b6e491ea6989cb7_elex_wannacry
- Size 84KB
- SHA256 b7fda0ee2b1469ab9045017965a2905ca2a4ba386fd6c63a9b4f89514380621a
- MD5 1060832c7f4eaa3a1b6e491ea6989cb7
- SHA1 565eb62c8adc4be5b6e8ac3091f3d8bdedf18e14
- SHA512 6b697d0640752de21f4adedf8b95dbc9f47dfb511502be863700fb771e369984332184be7075d71ebd90eb44a71d64f08e3deb48d3b4d7379b0431369b4eb02e
- SSDEEP 768:svw9816vhKQLrok4/wQWdYiJdYrJhdYrJosTX0udYrJosTVsTev:MEGh0okllZCJvCJXX0SCJXuev
- TLSH T1B3830A5372DC5CF3F1A623382977AF674D42BB90050A3B525AC08A8F499C9D7DA2C35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE