General
- Target 2026-08-20_d20ef6f9da516fdce0f992af300ce546_elex_wannacry
- Size 18KB
- Sample260820-rsp7wsdp9v
- SHA256 6df5cc30b0fd79745a30c1dd125caf268309667df1e7c5f8cc70ea7cba414843
- MD5 d20ef6f9da516fdce0f992af300ce546
- SHA1 40d05ba0d7685b8f49e44b017f8f8fc2805e8278
- SHA512 be80bc9c481d83ed532e337f2caaed945c3f25b83cb4dd7085fa0a3b33f96aabea5660b0531bb12a4d2896dd4ce9357bf0bf590197a53d3efe269a8019922837
- SSDEEP 384:vLoUqhdO7+eN6GWl1pcG4rAAAAAHZMHBfTwmHlQ:vLoZWN6GGBZ2BbwmH+
- TLSH T16A8242385FD24AF6F3B3CAB285F797D6EA31F1A3F4030A0DD58507068913642A985DAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-20_d20ef6f9da516fdce0f992af300ce546_elex_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_d20ef6f9da516fdce0f992af300ce546_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_d20ef6f9da516fdce0f992af300ce546_elex_wannacry
- Size 18KB
- SHA256 6df5cc30b0fd79745a30c1dd125caf268309667df1e7c5f8cc70ea7cba414843
- MD5 d20ef6f9da516fdce0f992af300ce546
- SHA1 40d05ba0d7685b8f49e44b017f8f8fc2805e8278
- SHA512 be80bc9c481d83ed532e337f2caaed945c3f25b83cb4dd7085fa0a3b33f96aabea5660b0531bb12a4d2896dd4ce9357bf0bf590197a53d3efe269a8019922837
- SSDEEP 384:vLoUqhdO7+eN6GWl1pcG4rAAAAAHZMHBfTwmHlQ:vLoZWN6GGBZ2BbwmH+
- TLSH T16A8242385FD24AF6F3B3CAB285F797D6EA31F1A3F4030A0DD58507068913642A985DAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Waski payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE