General
- Target 2026-08-20_c376016f7970cee5fcbc6b55c61a79d7_elex_wannacry
- Size 41KB
- Sample260820-xhabkstdna
- SHA256 fed41e8120f5ab3af4bc6304dd7c9b955646410154540b80e21922ba499292cd
- MD5 c376016f7970cee5fcbc6b55c61a79d7
- SHA1 e95c76f217c00c918fac9332a7c36fd3a9ceda9e
- SHA512 414c390df6a4b4bc6353400be88555587ff3072d9d1c7736bac1dac31e6f0f1baa7020a3a5ce9fd40311be50e7b8d697d0b0c8981efcb807f8e285977290522f
- SSDEEP 384:I8/JYSrFQjGezfNHP1zZYpMYUzMk9hBcecy0rtGzLfRHjBDZKbJCT+v4WP4p/n:F/3ed1zZN/zoy0rtsVN6ITo4hn
- TLSH T1631321B9ABD419B2D673DEB9C4F265C3B822B01A3D16980D04C21B491D23F53FDA265F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-20_c376016f7970cee5fcbc6b55c61a79d7_elex_wannacry.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_c376016f7970cee5fcbc6b55c61a79d7_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_c376016f7970cee5fcbc6b55c61a79d7_elex_wannacry
- Size 41KB
- SHA256 fed41e8120f5ab3af4bc6304dd7c9b955646410154540b80e21922ba499292cd
- MD5 c376016f7970cee5fcbc6b55c61a79d7
- SHA1 e95c76f217c00c918fac9332a7c36fd3a9ceda9e
- SHA512 414c390df6a4b4bc6353400be88555587ff3072d9d1c7736bac1dac31e6f0f1baa7020a3a5ce9fd40311be50e7b8d697d0b0c8981efcb807f8e285977290522f
- SSDEEP 384:I8/JYSrFQjGezfNHP1zZYpMYUzMk9hBcecy0rtGzLfRHjBDZKbJCT+v4WP4p/n:F/3ed1zZN/zoy0rtsVN6ITo4hn
- TLSH T1631321B9ABD419B2D673DEB9C4F265C3B822B01A3D16980D04C21B491D23F53FDA265F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE