2026-08-20_6d8bc8eef11cccdc02c62b0b0374528f_elex_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-20_6d8bc8eef11cccdc02c62b0b0374528f_elex_wannacry
Size 57KB
Sample260821-dedeaa1fpe
SHA256 58eb7843e0aaae99dd2fd58c2af0cdfaade20771ec0b391cb0d69c76186fba16
MD5 6d8bc8eef11cccdc02c62b0b0374528f
SHA1 bb72961433f1967d939562b5aab3a25add6970a5
SHA512 cf69213ca4bd00caaa7a2d17bc2ed1228363224a4805390468008554a1a41b23acfc4eb75fab39af98b581d93ebb59e9b986acfee269613ffc59bfd8fe29fb59
SSDEEP 768:IEJzv56vrcisMNerQ/8fFIUyR0cxzSpo4si7N7SKVr:156QincQyIUe+YKl
TLSH
T15A432903F30EF496D8855531B14A07309D389C24CA5C53A21B9CEF6E5BB7F6AB8631A7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-20_6d8bc8eef11cccdc02c62b0b0374528f_elex_wannacry

File Explorer

2026-08-20_6d8bc8eef11cccdc02c62b0b0374528f_elex_wannacry

.exe 57KB

2026-08-20_6d8bc8eef11cccdc02c62b0b0374528f_elex_wannacry

IMPHASH 864cd776c24a3c653fd89899ca32fe0b
SHA256 58eb7843e0aaae99dd2fd58c2af0cdfaade20771ec0b391cb0d69c76186fba16
MD5 6d8bc8eef11cccdc02c62b0b0374528f
SHA1 bb72961433f1967d939562b5aab3a25add6970a5
SHA512 cf69213ca4bd00caaa7a2d17bc2ed1228363224a4805390468008554a1a41b23acfc4eb75fab39af98b581d93ebb59e9b986acfee269613ffc59bfd8fe29fb59
SSDEEP 768:IEJzv56vrcisMNerQ/8fFIUyR0cxzSpo4si7N7SKVr:156QincQyIUe+YKl
TLSH
T15A432903F30EF496D8855531B14A07309D389C24CA5C53A21B9CEF6E5BB7F6AB8631A7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

21279

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

wsock32

gethostbyname WSAStartup inet_addr WSACleanup gethostname

kernel32

GetLocaleInfoA CloseHandle GetCurrentProcess GetLastError GetCurrentThread Sleep LocalFree GetVersionExA GetTickCount TerminateProcess CreateProcessA GetEnvironmentVariableA CreatePipe ReadFile PeekNamedPipe GetModuleFileNameA WriteFile ExitProcess GetModuleHandleA GetStartupInfoA LocalAlloc

user32

GetMessageA DispatchMessageA TranslateMessage GetDlgItem CreateDialogParamA ShowWindow SetTimer SendMessageA KillTimer PostMessageA SetWindowTextA

advapi32

EqualSid AllocateAndInitializeSid OpenThreadToken OpenProcessToken GetTokenInformation FreeSid

msvcrt

??2@YAPAXI@Z ??3@YAXPAX@Z __CxxFrameHandler asctime localtime time rand srand _memicmp sprintf fread fwrite fclose ftell fseek fopen strchr _exit _XcptFilter exit _acmdln __getmainargs _initterm __setusermatherr _adjust_fdiv __p__commode __p__fmode __set_app_type _except_handler3 _controlfp

msvcp60

?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB ?_Xlen@std@@YAXXZ ?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z ?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z ?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z ?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ

wininet

InternetConnectA InternetCloseHandle InternetReadFile HttpSendRequestA InternetSetOptionA HttpOpenRequestA HttpAddRequestHeadersA InternetOpenA

shlwapi

PathFileExistsA

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-20_6d8bc8eef11cccdc02c62b0b0374528f_elex_wannacry

wsock32

kernel32

user32

advapi32

msvcrt

msvcp60

wininet

shlwapi

generic