General
- Target 2026-08-21_fed41e84c5652698e211ad89ce757cc0_elex_goldeneye_wannacry
- Size 372KB
- Sample260821-3qfffstvbw
- SHA256 ff2eb6e4657f8592977e8ffb6434efd694af512df6e87d730fcd0d7bf938695d
- MD5 fed41e84c5652698e211ad89ce757cc0
- SHA1 122b5234768b555268e035979ae8e77e440907b1
- SHA512 a5f78634a357253141f0c1da1a92787cc5a44761dc507a1ce16e674613d5b89048d4e2d1f873105b90988d8bb4456f2927a48ecc35ef524d719f66cc6e789466
- SSDEEP 3072:CEGh0oBmlJOiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBE:CEGel/Oe2MUVg3vTeKcAEciTBqr3
- TLSH T116846E2067F6E698F5F30FB8ADB581409D7BBE916D31D61D22A8000E8D71A90DE71B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-21_fed41e84c5652698e211ad89ce757cc0_elex_goldeneye_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_fed41e84c5652698e211ad89ce757cc0_elex_goldeneye_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_fed41e84c5652698e211ad89ce757cc0_elex_goldeneye_wannacry
- Size 372KB
- SHA256 ff2eb6e4657f8592977e8ffb6434efd694af512df6e87d730fcd0d7bf938695d
- MD5 fed41e84c5652698e211ad89ce757cc0
- SHA1 122b5234768b555268e035979ae8e77e440907b1
- SHA512 a5f78634a357253141f0c1da1a92787cc5a44761dc507a1ce16e674613d5b89048d4e2d1f873105b90988d8bb4456f2927a48ecc35ef524d719f66cc6e789466
- SSDEEP 3072:CEGh0oBmlJOiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBE:CEGel/Oe2MUVg3vTeKcAEciTBqr3
- TLSH T116846E2067F6E698F5F30FB8ADB581409D7BBE916D31D61D22A8000E8D71A90DE71B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Auto-generated rule
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE