General

  • Target
    2026-08-20_a7a38d98496a64b3679d1964b9cddb81_elex_wannacry
  • Size 32KB
  • Sample260820-nsqa4sbl9x
  • SHA256 9bb83d71d29f1d4385fc7fad7352a749f00c3e67a614c104ffcf30a6fc6a8086
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-08-20_a7a38d98496a64b3679d1964b9cddb81_elex_wannacry
    • Size 32KB
    • SHA256 9bb83d71d29f1d4385fc7fad7352a749f00c3e67a614c104ffcf30a6fc6a8086
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects Waski payload

    • Family: Waski

      Waski is a trojan downloader written in C++.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks