General
- Target 2026-08-20_ad3ca91abb8e42221848e2c1d6d907d7_elex_wannacry
- Size 19KB
- Sample260821-c3vg2afk6w
- SHA256 bcfb6a812288dd5e002c9a605eb56f5d2e0e2151ff6845a6a83baa7e7be2676c
- MD5 ad3ca91abb8e42221848e2c1d6d907d7
- SHA1 ebd49e5af2fb3f620dddd992eed122d51ff76ab7
- SHA512 473d00afa5de9d427f1ecc3dfa0ec8b3f775521abe6815568534462187d12ddc5d07e3eb2b06be6d9ce1039a57d27cd77be049e0f1fd9b113e451c061daa8beb
- SSDEEP 384:vLoUqhdO7+eN6GWl1pcG4rAAAAAHZMHBfTwEoP//lMnBY0SzIl:vLoZWN6GGBZ2BbwEoP/NsBY0SzIl
- TLSH T1929252384FC25AB6F3B3CAB285F797D6AE31F5A3B4120A0DD58507068813B42ED85D6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-20_ad3ca91abb8e42221848e2c1d6d907d7_elex_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_ad3ca91abb8e42221848e2c1d6d907d7_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_ad3ca91abb8e42221848e2c1d6d907d7_elex_wannacry
- Size 19KB
- SHA256 bcfb6a812288dd5e002c9a605eb56f5d2e0e2151ff6845a6a83baa7e7be2676c
- MD5 ad3ca91abb8e42221848e2c1d6d907d7
- SHA1 ebd49e5af2fb3f620dddd992eed122d51ff76ab7
- SHA512 473d00afa5de9d427f1ecc3dfa0ec8b3f775521abe6815568534462187d12ddc5d07e3eb2b06be6d9ce1039a57d27cd77be049e0f1fd9b113e451c061daa8beb
- SSDEEP 384:vLoUqhdO7+eN6GWl1pcG4rAAAAAHZMHBfTwEoP//lMnBY0SzIl:vLoZWN6GGBZ2BbwEoP/NsBY0SzIl
- TLSH T1929252384FC25AB6F3B3CAB285F797D6AE31F5A3B4120A0DD58507068813B42ED85D6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Waski payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE