General
- Target 2026-08-20_c4de965a7382b88ac8059fee83f83053_elex_wannacry
- Size 16KB
- Sample260820-nlcrfayxet
- SHA256 b1f66fb899f64fe2b48aa8aa0c353554c93d74e9a3446a086ce54107e697aaac
- MD5 c4de965a7382b88ac8059fee83f83053
- SHA1 b239a4ec38dfcdb03f72a4d13dda6a5d751fda8a
- SHA512 78030f39d1079d5501d1436494209721968f33b2df49f9f090b6d9b34f857723bc20f2eb9a18f08971c686d90e426596bb75165ae62468c93a6e2bf4af14a0f3
- SSDEEP 384:uTQWckBeEd6ml1pcg79UP4EJzZsxPXgaF:uxckEEd62J798j9ZiPXvF
- TLSH T1497294395AD40C73E3FB83F585F7C1DAA871742B37035D2E54892B892D23B12ACA069D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-20_c4de965a7382b88ac8059fee83f83053_elex_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_c4de965a7382b88ac8059fee83f83053_elex_wannacry.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_c4de965a7382b88ac8059fee83f83053_elex_wannacry
- Size 16KB
- SHA256 b1f66fb899f64fe2b48aa8aa0c353554c93d74e9a3446a086ce54107e697aaac
- MD5 c4de965a7382b88ac8059fee83f83053
- SHA1 b239a4ec38dfcdb03f72a4d13dda6a5d751fda8a
- SHA512 78030f39d1079d5501d1436494209721968f33b2df49f9f090b6d9b34f857723bc20f2eb9a18f08971c686d90e426596bb75165ae62468c93a6e2bf4af14a0f3
- SSDEEP 384:uTQWckBeEd6ml1pcg79UP4EJzZsxPXgaF:uxckEEd62J798j9ZiPXvF
- TLSH T1497294395AD40C73E3FB83F585F7C1DAA871742B37035D2E54892B892D23B12ACA069D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Waski payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE