General
- Target 2026-08-20_28ec28cdb20f208c74196d381807f69e_elex_wannacry
- Size 15KB
- Sample260820-wqlh5ssgra
- SHA256 4ec94bb8517b46c4f1ebefba058f7fa6548d4af35a5bc8664afdfbb02c28c4e6
- MD5 28ec28cdb20f208c74196d381807f69e
- SHA1 c61dc6585d26aeaa52ab767e88ff71f67d2553a3
- SHA512 259a25a8653dbbc3c5dc338e5f27c81a4b8a482dce126adc84fef6c5bd05c0b81a94b3047925055aa7f670433109cfa2d5a254fd73c6303fbf4f3fc78ed8df02
- SSDEEP 192:uTk5WckBezHYQRPK6k7TjHwCl1oynzc2Fjmf2mrETLLC0qmg+jjGimeQ4ta1j:uTQWckBeEd6ml1pcg7F3GiyAa5
- TLSH T1AB72A4355BD20DB3E3BBD3F285FBC29A9865B03E63035A3F94492F4969235019C90DD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-20_28ec28cdb20f208c74196d381807f69e_elex_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_28ec28cdb20f208c74196d381807f69e_elex_wannacry.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_28ec28cdb20f208c74196d381807f69e_elex_wannacry
- Size 15KB
- SHA256 4ec94bb8517b46c4f1ebefba058f7fa6548d4af35a5bc8664afdfbb02c28c4e6
- MD5 28ec28cdb20f208c74196d381807f69e
- SHA1 c61dc6585d26aeaa52ab767e88ff71f67d2553a3
- SHA512 259a25a8653dbbc3c5dc338e5f27c81a4b8a482dce126adc84fef6c5bd05c0b81a94b3047925055aa7f670433109cfa2d5a254fd73c6303fbf4f3fc78ed8df02
- SSDEEP 192:uTk5WckBezHYQRPK6k7TjHwCl1oynzc2Fjmf2mrETLLC0qmg+jjGimeQ4ta1j:uTQWckBeEd6ml1pcg7F3GiyAa5
- TLSH T1AB72A4355BD20DB3E3BBD3F285FBC29A9865B03E63035A3F94492F4969235019C90DD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Waski payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE