2026-08-21_534783f5a601acceb3c20c93dd68e36b_elex_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-21_534783f5a601acceb3c20c93dd68e36b_elex_wannacry
Size 20KB
Sample260821-e7mdbsshkd
SHA256 d4a265994a3efdf1273b46a3bf75ab48e951c1f2f4d2aa2d1160bb738fa52978
MD5 534783f5a601acceb3c20c93dd68e36b
SHA1 784e8d23de1900a694895908a3f0584ba655d6ec
SHA512 01a916817f3932bd43a083812531e2a5089e54d8e85a4c524fe3f0d6bd995ddad42728ed11c9f623742a95959fdeec1ba5d41eeb5a7dfd8fb685dc06281aebc6
SSDEEP 384:rJEUw1ps+tY9iY8N5VxKCps5IH9PnCm78c5pcICjvrJh9ans1yduQWRo/:ry1u+tciNZ/s5g78G1ArYOyIQWRo/
TLSH
T1F6924B23DF9700F2EE276C71008A2B775B6F61990F019B97DB50DD6A18337D1E92A146
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-21_534783f5a601acceb3c20c93dd68e36b_elex_wannacry

File Explorer

2026-08-21_534783f5a601acceb3c20c93dd68e36b_elex_wannacry

.exe 20KB

2026-08-21_534783f5a601acceb3c20c93dd68e36b_elex_wannacry

IMPHASH 2bb8634b0f3c4592b8cce7c6017fa50d
SHA256 d4a265994a3efdf1273b46a3bf75ab48e951c1f2f4d2aa2d1160bb738fa52978
MD5 534783f5a601acceb3c20c93dd68e36b
SHA1 784e8d23de1900a694895908a3f0584ba655d6ec
SHA512 01a916817f3932bd43a083812531e2a5089e54d8e85a4c524fe3f0d6bd995ddad42728ed11c9f623742a95959fdeec1ba5d41eeb5a7dfd8fb685dc06281aebc6
SSDEEP 384:rJEUw1ps+tY9iY8N5VxKCps5IH9PnCm78c5pcICjvrJh9ans1yduQWRo/:ry1u+tciNZ/s5g78G1ArYOyIQWRo/
TLSH
T1F6924B23DF9700F2EE276C71008A2B775B6F61990F019B97DB50DD6A18337D1E92A146
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

17852

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

crypt32

CryptUnprotectData CertFindCertificateInStore CertOpenSystemStoreA CertFreeCertificateContext CertFindChainInStore

secur32

QueryContextAttributesA EncryptMessage

advapi32

RegOpenKeyA RegOpenKeyExA RegDeleteKeyA RegCloseKey RegCreateKeyExA RegSetValueExA GetUserNameA GetUserNameW CredEnumerateA RegQueryValueExA CredFree

shell32

ShellExecuteA

ws2_32

WSAStartup setsockopt WSAIoctl shutdown closesocket WSACleanup gethostname inet_ntoa gethostbyname htons connect recv send socket inet_addr

shlwapi

PathAddBackslashA PathFileExistsA PathRemoveFileSpecA PathFindFileNameA PathIsDirectoryA

user32

wsprintfA

oleaut32

GetErrorInfo

msvcrt

??3@YAXPAX@Z printf memmove sprintf strstr malloc strchr _strnicmp fclose fflush fwrite fopen fread fseek free rand srand time _mbslen ??2@YAPAXI@Z atoi _CxxThrowException _exit _XcptFilter exit _acmdln __getmainargs _initterm __setusermatherr _adjust_fdiv __p__commode __p__fmode __set_app_type _except_handler3 ??1type_info@@UAE@XZ _controlfp _filelength __CxxFrameHandler _fileno

netapi32

NetApiBufferFree NetUserGetInfo

iphlpapi

GetAdaptersInfo

kernel32

LoadLibraryA GetTempPathA CreateFileA GetFileSize CreateMutexA CreateThread GetModuleFileNameA GetTickCount GetWindowsDirectoryA CloseHandle PeekNamedPipe ReadFile WriteFile TerminateProcess GlobalMemoryStatus InterlockedIncrement InterlockedDecrement DeleteFileA GetStartupInfoA CreateProcessA GetModuleHandleA lstrcatA FindFirstFileA FindNextFileA FindClose GetDriveTypeA GetDiskFreeSpaceExA lstrcpyA lstrlenA lstrcmpA Sleep LocalAlloc LocalFree GetLastError GetVersionExA GetProcAddress

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-21_534783f5a601acceb3c20c93dd68e36b_elex_wannacry

crypt32

secur32

advapi32

shell32

ws2_32

shlwapi

user32

oleaut32

msvcrt

netapi32

iphlpapi

kernel32

generic