General

  • Target
    2026-08-20_d20ef6f9da516fdce0f992af300ce546_elex_wannacry
  • Size 18KB
  • Sample260820-rsp7wsdp9v
  • SHA256 6df5cc30b0fd79745a30c1dd125caf268309667df1e7c5f8cc70ea7cba414843
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-08-20_d20ef6f9da516fdce0f992af300ce546_elex_wannacry
    • Size 18KB
    • SHA256 6df5cc30b0fd79745a30c1dd125caf268309667df1e7c5f8cc70ea7cba414843
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects Waski payload

    • Family: Waski

      Waski is a trojan downloader written in C++.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks