General
- Target 2026-08-20_c22cff1be74676208d0240e03ea244af_elex_upatre_wannacry
- Size 59KB
- Sample260820-xhbjmstdnc
- SHA256 6c5cc0f73241a546e9569f3179033b0ba63b682213d5916ded78c6b0102ed81c
- MD5 c22cff1be74676208d0240e03ea244af
- SHA1 9b0ba8a17d70d1c5c055f9105ee43bf4bf09be23
- SHA512 6ef3490e2a61f378547155e502d5bc4b925d2f4dea3cbcf26e057a5f7b4a7881f9ab90fe56ccbea04239cabf94d420d3afd2b381e9803b1a326df3c864c18713
- SSDEEP 768:xW9+F8BPtElggggggLvggggggggUaocdF+qqPbNMugJI/xZ9dHtTFmd1MVZy0Fi:ekoqzqTNMDSpZ9fTKMTZi
- TLSH T1814349386AD51572E37BDEB585F251CAB96DBC1339035C0E40B2F3440AB3BD2ADA191E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-20_c22cff1be74676208d0240e03ea244af_elex_upatre_wannacry.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_c22cff1be74676208d0240e03ea244af_elex_upatre_wannacry.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_c22cff1be74676208d0240e03ea244af_elex_upatre_wannacry
- Size 59KB
- SHA256 6c5cc0f73241a546e9569f3179033b0ba63b682213d5916ded78c6b0102ed81c
- MD5 c22cff1be74676208d0240e03ea244af
- SHA1 9b0ba8a17d70d1c5c055f9105ee43bf4bf09be23
- SHA512 6ef3490e2a61f378547155e502d5bc4b925d2f4dea3cbcf26e057a5f7b4a7881f9ab90fe56ccbea04239cabf94d420d3afd2b381e9803b1a326df3c864c18713
- SSDEEP 768:xW9+F8BPtElggggggLvggggggggUaocdF+qqPbNMugJI/xZ9dHtTFmd1MVZy0Fi:ekoqzqTNMDSpZ9fTKMTZi
- TLSH T1814349386AD51572E37BDEB585F251CAB96DBC1339035C0E40B2F3440AB3BD2ADA191E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE