General
- Target 2026-08-20_b0053f4b896160ecd85cbf5aefc13776_elex_wannacry
- Size 39KB
- Sample260820-r617bayhph
- SHA256 4f25ba7950a850794f6c1fa80e8320d941f36e9766e2bcf73f5a1409bced627a
- MD5 b0053f4b896160ecd85cbf5aefc13776
- SHA1 c177a5165cc74b6b13cba29d3f2960ab50498307
- SHA512 d292a96827172ff1e1f3d258dfa98c46b2f4967cc0723952667188209f993e1b9f6e551aeed24ef87eaf5f54eacff904cd7f3b1ed03fed076e60bd18f3b807c5
- SSDEEP 384:I8/JYSrFQjGezfNHP1zZYpMYUzMk9hBcecy0rtGzLfRHjBDZKbJCT+v4WPccpSk:F/3ed1zZN/zoy0rtsVN6IToVpSk
- TLSH T1210353B9AFD409B6D673DEB9C4F265C3B822B01A3D15980D04D22B061E23B53FDA254F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-20_b0053f4b896160ecd85cbf5aefc13776_elex_wannacry.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_b0053f4b896160ecd85cbf5aefc13776_elex_wannacry.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_b0053f4b896160ecd85cbf5aefc13776_elex_wannacry
- Size 39KB
- SHA256 4f25ba7950a850794f6c1fa80e8320d941f36e9766e2bcf73f5a1409bced627a
- MD5 b0053f4b896160ecd85cbf5aefc13776
- SHA1 c177a5165cc74b6b13cba29d3f2960ab50498307
- SHA512 d292a96827172ff1e1f3d258dfa98c46b2f4967cc0723952667188209f993e1b9f6e551aeed24ef87eaf5f54eacff904cd7f3b1ed03fed076e60bd18f3b807c5
- SSDEEP 384:I8/JYSrFQjGezfNHP1zZYpMYUzMk9hBcecy0rtGzLfRHjBDZKbJCT+v4WPccpSk:F/3ed1zZN/zoy0rtsVN6IToVpSk
- TLSH T1210353B9AFD409B6D673DEB9C4F265C3B822B01A3D15980D04D22B061E23B53FDA254F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE