3e4f7d3c9ef51284dc0b8a8da5aab24406101c6e6c3c9407686713e1a5cb968a | Triage™

Login
Reports

Overview

overview

Static

static

3

2026-08-21...ry.exe

windows10-2004-x64

2026-08-21...ry.exe

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-21_4cc7fec9d078fcc5a71253e8cbd4683a_elex_wannacry
Size 21KB
Sample260821-e8nmsashpf
SHA256 3e4f7d3c9ef51284dc0b8a8da5aab24406101c6e6c3c9407686713e1a5cb968a
MD5 4cc7fec9d078fcc5a71253e8cbd4683a
SHA1 a4b69b6924acb553f4b6ba8f21ae6fb6c938c682
SHA512 5875c6ca4bfed58efa5c6db904ae17c0b4b8abf579cb9cec79a18611ac26f7d039a7dd857ba5226121afcc4c1bad3661f3ad7dd7aacae27cba3eceef97350a8d
SSDEEP 384:is9HSiGAma+NdkIXhDRrya+BU9QIyNYl1m2sPQdqy/CO:is9yiGrDp4YqIdm2sPXy/CO
TLSH
T1D3A24A56ABC910E5FC372D32001E7676D76FB1291E059B9BD750CE6C2C32A96EC2A306
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

defense_evasion discovery execution persistence

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-08-21_4cc7fec9d078fcc5a71253e8cbd4683a_elex_wannacry.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

150 seconds

defense_evasion discovery execution persistence

Behavioral task

behavioral2

Sample

2026-08-21_4cc7fec9d078fcc5a71253e8cbd4683a_elex_wannacry.exe

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

defense_evasion discovery execution persistence

Malware Config

Targets

- Target
  2026-08-21_4cc7fec9d078fcc5a71253e8cbd4683a_elex_wannacry
- Size 21KB
- SHA256 3e4f7d3c9ef51284dc0b8a8da5aab24406101c6e6c3c9407686713e1a5cb968a
- MD5 4cc7fec9d078fcc5a71253e8cbd4683a
- SHA1 a4b69b6924acb553f4b6ba8f21ae6fb6c938c682
- SHA512 5875c6ca4bfed58efa5c6db904ae17c0b4b8abf579cb9cec79a18611ac26f7d039a7dd857ba5226121afcc4c1bad3661f3ad7dd7aacae27cba3eceef97350a8d
- SSDEEP 384:is9HSiGAma+NdkIXhDRrya+BU9QIyNYl1m2sPQdqy/CO:is9yiGrDp4YqIdm2sPXy/CO
- TLSH
  T1D3A24A56ABC910E5FC372D32001E7676D76FB1291E059B9BD750CE6C2C32A96EC2A306
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery execution persistence
- Modifies firewall policy service
  defense_evasion
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryexecutionpersistence

behavioral2

defense_evasiondiscoveryexecutionpersistence

© 2018-2026

Terms | Privacy