Analysis
- max time kernel
148s - max time network
135s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
21/08/2026, 04:26
General
- Target 2026-08-21_6c6581d1dc54a31852a803653cefe2c4_elex_hello_wannacry.exe
- Size 8KB
- Sample260821-e2r2magm3w
- SHA256 9609392918749cd445f144c460bf69726c25ecae2ffe02d8d421f09f88ab1917
Score
7/10
Malware Config
Signatures
- Executes dropped EXE 2 IoCs
- Adds Run key to start application 2 TTPs 1 IoCs
- System Location Discovery: System Language Discovery 1 TTPs 3 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_6c6581d1dc54a31852a803653cefe2c4_elex_hello_wannacry.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-21_6c6581d1dc54a31852a803653cefe2c4_elex_hello_wannacry.exe"1⤵
- Adds Run key to start application
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\wuauclt.exeC:\Users\Admin\wuauclt.exe -s C:\Users\Admin\AppData\Local\Temp\2026-08-21_6c6581d1dc54a31852a803653cefe2c4_elex_hello_wannacry.exe2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
-
-
C:\Users\Admin\wuauclt.exeC:\Users\Admin\wuauclt.exe1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
0f5007522459c86e95ffcc62f32308f1_664c2b74-2189-4fdf-aeef-891b4de0bda7
wuauclt.exe