General
- Target 2026-08-21_456dd8de142be8238ee02aca19f4ee88_elex_wannacry
- Size 21KB
- Sample260821-e94qdsw1hv
- SHA256 1c0e6fb684e7d9a4b84fa4e7ab2f56495be63ae38b70e395c0ce2934f14cf1f6
- MD5 456dd8de142be8238ee02aca19f4ee88
- SHA1 c39ab56aef3d5aad4aa83aaa81e9f160e01f84de
- SHA512 4b71d4b70d66ee15ebaf079e0c9296e27728a48567d7cfc6335db4909e7cf607543f29acb86082edb4615b4c0a5dfc7c0c95a1a7e65b8d8ceb5f88ebbd64f68e
- SSDEEP 384:vLoUqhdO7+eN6GWl1pcG4rAAAAAHZMHBfTwEoP//lMnBYDhoAhD4ABJUcYXQ6U:vLoZWN6GGBZ2BbwEoP/NsBYDOAhk4YXG
- TLSH T1AFA2203C5FD14AB7F3B3CAB685F796C6E931B5A3B9020A0DD08607458823B52ED81D6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-21_456dd8de142be8238ee02aca19f4ee88_elex_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_456dd8de142be8238ee02aca19f4ee88_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_456dd8de142be8238ee02aca19f4ee88_elex_wannacry
- Size 21KB
- SHA256 1c0e6fb684e7d9a4b84fa4e7ab2f56495be63ae38b70e395c0ce2934f14cf1f6
- MD5 456dd8de142be8238ee02aca19f4ee88
- SHA1 c39ab56aef3d5aad4aa83aaa81e9f160e01f84de
- SHA512 4b71d4b70d66ee15ebaf079e0c9296e27728a48567d7cfc6335db4909e7cf607543f29acb86082edb4615b4c0a5dfc7c0c95a1a7e65b8d8ceb5f88ebbd64f68e
- SSDEEP 384:vLoUqhdO7+eN6GWl1pcG4rAAAAAHZMHBfTwEoP//lMnBYDhoAhD4ABJUcYXQ6U:vLoZWN6GGBZ2BbwEoP/NsBYDOAhk4YXG
- TLSH T1AFA2203C5FD14AB7F3B3CAB685F796C6E931B5A3B9020A0DD08607458823B52ED81D6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Waski payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE