General
- Target 2026-08-20_a6f0d606dc10b02c4eb8ee606a21f00c_elex_wannacry
- Size 19KB
- Sample260820-nszjsabm2x
- SHA256 2ebb94b70e9d0732af78650108883cce975c6dc4462ffa2e59c9a37947623474
- MD5 a6f0d606dc10b02c4eb8ee606a21f00c
- SHA1 e5496d56136c492c679c0b44b12f94a60343b8d6
- SHA512 5b369a3eae620fba80d7f29d1d0d68d6796d30444b0ecc40552f8cd09b174006050f041c1dab338fe12bcd1d2c966e3a4a30bc3211e4012c4d0ef32d1ce0730b
- SSDEEP 384:vLoUqhdO7+eN6GWl1pcG4rAAAAAHZMHBfTwEoP//lMnBY0AQE:vLoZWN6GGBZ2BbwEoP/NsBY0AQE
- TLSH T1EE9262385FD28AB6F3B3CAB285F797D6AE31F1A3F4020A0DD58507058823742AD85D6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-20_a6f0d606dc10b02c4eb8ee606a21f00c_elex_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_a6f0d606dc10b02c4eb8ee606a21f00c_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_a6f0d606dc10b02c4eb8ee606a21f00c_elex_wannacry
- Size 19KB
- SHA256 2ebb94b70e9d0732af78650108883cce975c6dc4462ffa2e59c9a37947623474
- MD5 a6f0d606dc10b02c4eb8ee606a21f00c
- SHA1 e5496d56136c492c679c0b44b12f94a60343b8d6
- SHA512 5b369a3eae620fba80d7f29d1d0d68d6796d30444b0ecc40552f8cd09b174006050f041c1dab338fe12bcd1d2c966e3a4a30bc3211e4012c4d0ef32d1ce0730b
- SSDEEP 384:vLoUqhdO7+eN6GWl1pcG4rAAAAAHZMHBfTwEoP//lMnBY0AQE:vLoZWN6GGBZ2BbwEoP/NsBY0AQE
- TLSH T1EE9262385FD28AB6F3B3CAB285F797D6AE31F1A3F4020A0DD58507058823742AD85D6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Waski payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE