General
- Target 2026-08-21_927a59f291615aef195ba3068999dd48_elex_wannacry
- Size 20KB
- Sample260821-b3m8aatyft
- SHA256 58f70d88d6912cfa398d9c66c48a8ccd1405d5b2bff8c329100ed4d4ba67d058
- MD5 927a59f291615aef195ba3068999dd48
- SHA1 a6c8dc4bb1f27c1f3902e40507646131a0099a61
- SHA512 63f49e4936157753ca104ef4330951e3ae58b08d598f7467b644e044b5f2c6d9ed7830932948ddac7d99b82681b4faf458d5c3414a593b10770acf07b6207148
- SSDEEP 384:vLoUqhdO7+eN6GWl1pcG4rAAAAAHZMHBfTwEoP//lMnBY0amvqL:vLoZWN6GGBZ2BbwEoP/NsBY7L
- TLSH T18BA253395FD54AB6F3B3CAB685F796D6E931F4A3B4020A0DD08607058823B52ED81D6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-21_927a59f291615aef195ba3068999dd48_elex_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_927a59f291615aef195ba3068999dd48_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_927a59f291615aef195ba3068999dd48_elex_wannacry
- Size 20KB
- SHA256 58f70d88d6912cfa398d9c66c48a8ccd1405d5b2bff8c329100ed4d4ba67d058
- MD5 927a59f291615aef195ba3068999dd48
- SHA1 a6c8dc4bb1f27c1f3902e40507646131a0099a61
- SHA512 63f49e4936157753ca104ef4330951e3ae58b08d598f7467b644e044b5f2c6d9ed7830932948ddac7d99b82681b4faf458d5c3414a593b10770acf07b6207148
- SSDEEP 384:vLoUqhdO7+eN6GWl1pcG4rAAAAAHZMHBfTwEoP//lMnBY0amvqL:vLoZWN6GGBZ2BbwEoP/NsBY7L
- TLSH T18BA253395FD54AB6F3B3CAB685F796D6E931F4A3B4020A0DD08607058823B52ED81D6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Waski payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE