General
- Target 2026-08-20_0d3de54d19b39b709577efd0736affc1_elex_wannacry
- Size 40KB
- Sample260821-bckdpsgh43
- SHA256 29e4e5743f8e335fe5922413ab2b95acd54f6bd4e6c578456ae23203bcb8da67
- MD5 0d3de54d19b39b709577efd0736affc1
- SHA1 d42ddf3b07b55e9d295091663540b0daa7994c32
- SHA512 609997401ab518aad34edc96201101bbed7dbcf84f2ae8b1fb2cc0189dae226ad27259561c478a86da0aa7dc70a85ccc95c88de7f7ef78a60bd5e1edeadb68c7
- SSDEEP 384:I8/JYSrFQjGezfNHP1zZYpMYUzMk9hBcecy0rtGzLfRHjBDZKbJCT+v4WPcp:F/3ed1zZN/zoy0rtsVN6ITocp
- TLSH T1D01332B9ABD409B6D773DEB9C5F264C3B822B01B3D16980D04C21B491D23B53EDA265F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-20_0d3de54d19b39b709577efd0736affc1_elex_wannacry.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_0d3de54d19b39b709577efd0736affc1_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_0d3de54d19b39b709577efd0736affc1_elex_wannacry
- Size 40KB
- SHA256 29e4e5743f8e335fe5922413ab2b95acd54f6bd4e6c578456ae23203bcb8da67
- MD5 0d3de54d19b39b709577efd0736affc1
- SHA1 d42ddf3b07b55e9d295091663540b0daa7994c32
- SHA512 609997401ab518aad34edc96201101bbed7dbcf84f2ae8b1fb2cc0189dae226ad27259561c478a86da0aa7dc70a85ccc95c88de7f7ef78a60bd5e1edeadb68c7
- SSDEEP 384:I8/JYSrFQjGezfNHP1zZYpMYUzMk9hBcecy0rtGzLfRHjBDZKbJCT+v4WPcp:F/3ed1zZN/zoy0rtsVN6ITocp
- TLSH T1D01332B9ABD409B6D773DEB9C5F264C3B822B01B3D16980D04C21B491D23B53EDA265F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE