General
- Target 2026-08-20_b1e02cc694ce4958a8352ce3c559cead_elex_wannacry
- Size 59KB
- Sample260820-lpq25atfmf
- SHA256 d61e513ed3bc3f5e228984da762b4686e582a06f405a146ddf68887e36898de4
- MD5 b1e02cc694ce4958a8352ce3c559cead
- SHA1 39de4ad3efd0ed260a03a02c62df8a94b0ad3121
- SHA512 ff2aaef2a7d739ff661a58f370269a7f15b6797ce8536b69e7d708f6b595fb8b965bfe88bafe5dd645c2f65c0939e02d75553c41d2f80971c8ee2462a5db2593
- SSDEEP 384:MbLwOs8AHsc4sMfwhKQLrojXP3f4/CFsrcGIiXY1nhbHQn:Mvw9816vhKQLrojXff4/wQDIi4dHQ
- TLSH T186436C830BE948F2F7911171057D5BB9627BEAC0D209BEDB7F80DE28117B242E53E14A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-20_b1e02cc694ce4958a8352ce3c559cead_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_b1e02cc694ce4958a8352ce3c559cead_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_b1e02cc694ce4958a8352ce3c559cead_elex_wannacry
- Size 59KB
- SHA256 d61e513ed3bc3f5e228984da762b4686e582a06f405a146ddf68887e36898de4
- MD5 b1e02cc694ce4958a8352ce3c559cead
- SHA1 39de4ad3efd0ed260a03a02c62df8a94b0ad3121
- SHA512 ff2aaef2a7d739ff661a58f370269a7f15b6797ce8536b69e7d708f6b595fb8b965bfe88bafe5dd645c2f65c0939e02d75553c41d2f80971c8ee2462a5db2593
- SSDEEP 384:MbLwOs8AHsc4sMfwhKQLrojXP3f4/CFsrcGIiXY1nhbHQn:Mvw9816vhKQLrojXff4/wQDIi4dHQ
- TLSH T186436C830BE948F2F7911171057D5BB9627BEAC0D209BEDB7F80DE28117B242E53E14A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE