General
- Target 2026-08-21_5cfc761e0ad3e12ddff6378223ab1ce3_elex_wannacry
- Size 91KB
- Sample260821-e5w5rahf47
- SHA256 75f41d7541a79f53d0e4ae043aac8060cec7645cf624e2ea7dfe1937326b1cd7
- MD5 5cfc761e0ad3e12ddff6378223ab1ce3
- SHA1 569576177470c555fbfd68cdf956a354c5f4189c
- SHA512 070f1a1c3ea6ea658b1f4d79a3ee66ab8025cf311ddb65b7ab220841282738e5990e6e83578461c84866962a0ac7414f04c05958ce832a6bad26ac7eea6e89cc
- SSDEEP 1536:Fm1n4CrSuwbI4Y4Yk/s73hhEiA+pk8oJGap7tED3N+rHuOj/ukcij+ozSkhwBCwT:A1n4/I4Ytk/CIUS9HF2D3NmP7uV8X6
- TLSH T11793F153FBB492A1C511163068E727728A66B9940100F228E735FCADF8FF1D3D855B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_5cfc761e0ad3e12ddff6378223ab1ce3_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_5cfc761e0ad3e12ddff6378223ab1ce3_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_5cfc761e0ad3e12ddff6378223ab1ce3_elex_wannacry
- Size 91KB
- SHA256 75f41d7541a79f53d0e4ae043aac8060cec7645cf624e2ea7dfe1937326b1cd7
- MD5 5cfc761e0ad3e12ddff6378223ab1ce3
- SHA1 569576177470c555fbfd68cdf956a354c5f4189c
- SHA512 070f1a1c3ea6ea658b1f4d79a3ee66ab8025cf311ddb65b7ab220841282738e5990e6e83578461c84866962a0ac7414f04c05958ce832a6bad26ac7eea6e89cc
- SSDEEP 1536:Fm1n4CrSuwbI4Y4Yk/s73hhEiA+pk8oJGap7tED3N+rHuOj/ukcij+ozSkhwBCwT:A1n4/I4Ytk/CIUS9HF2D3NmP7uV8X6
- TLSH T11793F153FBB492A1C511163068E727728A66B9940100F228E735FCADF8FF1D3D855B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory