2026-08-21_497bee3f913209e6300cd545dbf9e1d4_elex_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-21_497bee3f913209e6300cd545dbf9e1d4_elex_wannacry
Size 15KB
Sample260821-e896sagn3x
SHA256 df6d68d1fe80d8860768f502a520d1eaed14414c7d669a5dc257cac5cfd8218c
MD5 497bee3f913209e6300cd545dbf9e1d4
SHA1 2756bef65933c989e014f5d965aad0efecb696af
SHA512 4fde5e5d698f592a5c8b57dba1b6270de9ca2701036efcf675d6fdb5c3675ed93530e9c506d5ceb36b0f377013f55616091ed37de4b19e6b330884f6a56983b5
SSDEEP 384:zsQdcUFXCIDEySFyal9RR44UDCnx1CLLB2LZDO:AzWCIDEVpXRR4lDCPCMVDO
TLSH
T1156219871AD80CF3E7C20132167A9A22EFF59524683DEED7878015A11DEEDC4D61871A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-21_497bee3f913209e6300cd545dbf9e1d4_elex_wannacry

File Explorer

2026-08-21_497bee3f913209e6300cd545dbf9e1d4_elex_wannacry

.exe 15KB

2026-08-21_497bee3f913209e6300cd545dbf9e1d4_elex_wannacry

IMPHASH 4065ab4c3fd4257b19a5bed1e9a63fec
SHA256 df6d68d1fe80d8860768f502a520d1eaed14414c7d669a5dc257cac5cfd8218c
MD5 497bee3f913209e6300cd545dbf9e1d4
SHA1 2756bef65933c989e014f5d965aad0efecb696af
SHA512 4fde5e5d698f592a5c8b57dba1b6270de9ca2701036efcf675d6fdb5c3675ed93530e9c506d5ceb36b0f377013f55616091ed37de4b19e6b330884f6a56983b5
SSDEEP 384:zsQdcUFXCIDEySFyal9RR44UDCnx1CLLB2LZDO:AzWCIDEVpXRR4lDCPCMVDO
TLSH
T1156219871AD80CF3E7C20132167A9A22EFF59524683DEED7878015A11DEEDC4D61871A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

11807

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateProcessA OpenProcess GetFileAttributesA GetSystemDirectoryA ExpandEnvironmentStringsA GetVolumeInformationA GetDriveTypeA lstrcatA GetLogicalDrives Process32Next GetExitCodeProcess CreateToolhelp32Snapshot GetFileSize CreateFileA GetCurrentProcess DeleteFileA OutputDebugStringA CopyFileA GetModuleFileNameA GetModuleHandleA PeekNamedPipe ReadFile WriteFile GetComputerNameA Sleep CreatePipe GetWindowsDirectoryA SetCurrentDirectoryA CreateThread WaitForSingleObject GetStartupInfoA CloseHandle TerminateProcess Process32First GetLastError

msvcrt

_acmdln __getmainargs _initterm __setusermatherr _adjust_fdiv __p__commode __p__fmode __set_app_type _except_handler3 _controlfp ??3@YAXPAX@Z strlen strcpy ??2@YAPAXI@Z sprintf atoi _strcmpi memset strcat strrchr exit _XcptFilter _exit printf sscanf strstr atol __CxxFrameHandler

wininet

InternetQueryOptionA InternetOpenA InternetReadFile InternetConnectA HttpOpenRequestA HttpAddRequestHeadersA InternetSetOptionA HttpSendRequestA InternetCloseHandle

advapi32

CreateProcessAsUserA CloseServiceHandle EnumServicesStatusExA OpenSCManagerA ControlService OpenServiceA StartServiceA StartServiceCtrlDispatcherA SetServiceStatus RegisterServiceCtrlHandlerA QueryServiceStatus ChangeServiceConfig2A CreateServiceA DeleteService OpenProcessToken

urlmon

URLDownloadToFileA

secur32

GetUserNameExA

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-21_497bee3f913209e6300cd545dbf9e1d4_elex_wannacry

kernel32

msvcrt

wininet

advapi32

urlmon

secur32

generic