General
- Target 2026-08-21_b0ff5087b7b1d153661d57cbf33b09b1_elex_wannacry
- Size 87KB
- Sample260821-emllassdrg
- SHA256 06b33823c953f937f40a3823a13225336cce6304276612c43e5198ecc4f75b53
- MD5 b0ff5087b7b1d153661d57cbf33b09b1
- SHA1 3e9dce1394d3765885db2a29be13d8e4288ce9fc
- SHA512 a632d9da355e6d7935ca015148653eb8e6e0248d8bc2e0f705ef434ba46c743a050c0b49dc4ea8c40ead21f168ab4bccbfbb8a4b60fe0ed255fc35256e1639cb
- SSDEEP 1536:qm1n4CrSuwbFS73hhEiA+pk8oJGap7tED3NahRYUcCLe4MmbA5T8NbKadf3XEu:N1n4/FEIUS9HF2D3NSPR1df3XEu
- TLSH T15393F197BBAB04B2CC165270359BB7324B326DC14181E639EB26FD5165FB230F84AD4E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_b0ff5087b7b1d153661d57cbf33b09b1_elex_wannacry.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_b0ff5087b7b1d153661d57cbf33b09b1_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_b0ff5087b7b1d153661d57cbf33b09b1_elex_wannacry
- Size 87KB
- SHA256 06b33823c953f937f40a3823a13225336cce6304276612c43e5198ecc4f75b53
- MD5 b0ff5087b7b1d153661d57cbf33b09b1
- SHA1 3e9dce1394d3765885db2a29be13d8e4288ce9fc
- SHA512 a632d9da355e6d7935ca015148653eb8e6e0248d8bc2e0f705ef434ba46c743a050c0b49dc4ea8c40ead21f168ab4bccbfbb8a4b60fe0ed255fc35256e1639cb
- SSDEEP 1536:qm1n4CrSuwbFS73hhEiA+pk8oJGap7tED3NahRYUcCLe4MmbA5T8NbKadf3XEu:N1n4/FEIUS9HF2D3NSPR1df3XEu
- TLSH T15393F197BBAB04B2CC165270359BB7324B326DC14181E639EB26FD5165FB230F84AD4E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory