General
- Target 2026-08-21_dff1819fc17bb81dc2278f87c174b688_elex_wannacry
- Size 384KB
- Sample260821-2ysv3syemf
- SHA256 a3729dab2713193a174ee08b6ee3a5c0e882ffa8382695cecf8aa19c33a1bcef
- MD5 dff1819fc17bb81dc2278f87c174b688
- SHA1 ea8cbb812745249b17d2b8e57e9c3768ab818464
- SHA512 63c33195fc8b16cac9c2b49f7da4b080ca1cf587a3494383348d12ba3066f55ed9d9e5d1860c36c2a7b05c7cc2127000d44e323d7e68c4fe2712a58b380517d9
- SSDEEP 3072:iDZv6EB4m/K5nqD5+n9l6ypKNxrCnz58J151lG0+r9baQZDz5LKTJtaorz18xHm5:mAE6m/KNqDJySrCtHNtd9kPrzR5
- TLSH T101848DF0BEC1A058D8853CB58AD4E6F872223DEA8D1C99437479777E1C73E4EA705628
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_dff1819fc17bb81dc2278f87c174b688_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_dff1819fc17bb81dc2278f87c174b688_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_dff1819fc17bb81dc2278f87c174b688_elex_wannacry
- Size 384KB
- SHA256 a3729dab2713193a174ee08b6ee3a5c0e882ffa8382695cecf8aa19c33a1bcef
- MD5 dff1819fc17bb81dc2278f87c174b688
- SHA1 ea8cbb812745249b17d2b8e57e9c3768ab818464
- SHA512 63c33195fc8b16cac9c2b49f7da4b080ca1cf587a3494383348d12ba3066f55ed9d9e5d1860c36c2a7b05c7cc2127000d44e323d7e68c4fe2712a58b380517d9
- SSDEEP 3072:iDZv6EB4m/K5nqD5+n9l6ypKNxrCnz58J151lG0+r9baQZDz5LKTJtaorz18xHm5:mAE6m/KNqDJySrCtHNtd9kPrzR5
- TLSH T101848DF0BEC1A058D8853CB58AD4E6F872223DEA8D1C99437479777E1C73E4EA705628
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.