General
- Target 2026-08-20_ef166495086607348b62a06a8723aff0_elex_wannacry
- Size 21KB
- Sample260820-m8ezmsar3w
- SHA256 39f2b8153d97740315620b8c44f619b45e5331ad52eb67dd7240023bbcab3416
- MD5 ef166495086607348b62a06a8723aff0
- SHA1 3736ef8d669b08f0f96672b1964a45699465ba3f
- SHA512 7cd39fedb552468aa5c418b63771f840294c3185f31af8b06bc49fb1fd9f01acbaa741befe50e3bff777979da194737b336804b8c9824628195314821e96e0f2
- SSDEEP 384:vLoUqhdO7+eN6GWl1pcG4rAAAAAHZMHBfTwEoP//lMnBYR90+OgllmgIN:vLoZWN6GGBZ2BbwEoP/NsBYLIglPIN
- TLSH T128A23E384FD24AB6E3B3CAB685F796D6FA31F1A3B5020E0D948603458C13B53AD85D6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-20_ef166495086607348b62a06a8723aff0_elex_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_ef166495086607348b62a06a8723aff0_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_ef166495086607348b62a06a8723aff0_elex_wannacry
- Size 21KB
- SHA256 39f2b8153d97740315620b8c44f619b45e5331ad52eb67dd7240023bbcab3416
- MD5 ef166495086607348b62a06a8723aff0
- SHA1 3736ef8d669b08f0f96672b1964a45699465ba3f
- SHA512 7cd39fedb552468aa5c418b63771f840294c3185f31af8b06bc49fb1fd9f01acbaa741befe50e3bff777979da194737b336804b8c9824628195314821e96e0f2
- SSDEEP 384:vLoUqhdO7+eN6GWl1pcG4rAAAAAHZMHBfTwEoP//lMnBYR90+OgllmgIN:vLoZWN6GGBZ2BbwEoP/NsBYLIglPIN
- TLSH T128A23E384FD24AB6E3B3CAB685F796D6FA31F1A3B5020E0D948603458C13B53AD85D6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Waski payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE