General
- Target 2026-08-20_000af18397adc16c76cb0b2de124a96a_elex_wannacry
- Size 15KB
- Sample260820-tkcmyatzat
- SHA256 2db3f0da13e138d8c0c3fd52ddf98ada0184f84971ebf8d52b232a3bd8cfa26a
- MD5 000af18397adc16c76cb0b2de124a96a
- SHA1 a0317eec5fb1629a6d12d9fe13737013c6a44918
- SHA512 0a2b20dd987a1b806bc26c4cc26e69c95ae479991c107d9b9ff05447aa68e9d1a0cdf7e088a7d3a7e585e96496e1faa8be7a735787c34340c949b59a9d328e43
- SSDEEP 192:uTk5WckBezHYQRPK6k7TjHwCl1oynzc2Fjmf2mrETLLC0qmg+jjGih1I87fGZR3e:uTQWckBeEd6ml1pcg7F3Gih1df234d
- TLSH T11A72B7355AD11DB3E3BBD3F685FBC1D69825B02F67035A3F90492F892923A119C90E9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-20_000af18397adc16c76cb0b2de124a96a_elex_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_000af18397adc16c76cb0b2de124a96a_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_000af18397adc16c76cb0b2de124a96a_elex_wannacry
- Size 15KB
- SHA256 2db3f0da13e138d8c0c3fd52ddf98ada0184f84971ebf8d52b232a3bd8cfa26a
- MD5 000af18397adc16c76cb0b2de124a96a
- SHA1 a0317eec5fb1629a6d12d9fe13737013c6a44918
- SHA512 0a2b20dd987a1b806bc26c4cc26e69c95ae479991c107d9b9ff05447aa68e9d1a0cdf7e088a7d3a7e585e96496e1faa8be7a735787c34340c949b59a9d328e43
- SSDEEP 192:uTk5WckBezHYQRPK6k7TjHwCl1oynzc2Fjmf2mrETLLC0qmg+jjGih1I87fGZR3e:uTQWckBeEd6ml1pcg7F3Gih1df234d
- TLSH T11A72B7355AD11DB3E3BBD3F685FBC1D69825B02F67035A3F90492F892923A119C90E9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Waski payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE