General
- Target 2026-08-21_0cbfcdcf55b1bc8892ca5319dc793518_elex_hello_wannacry
- Size 84KB
- Sample260821-g7e1csab23
- SHA256 e8d595f80824bccd65108b24e1c28a46c2c0a0b084707eebf506b5e667dd704f
- MD5 0cbfcdcf55b1bc8892ca5319dc793518
- SHA1 420383fc5e3bf539d84691520f8b72593bc8cc9f
- SHA512 65e6a600320703fdcb735b2002728af78b6a86504c7af53bad4fa7c1aec100620553c8e0ee5b3c701fd074cce6239b12bf9e6302065f8378deb941632bfdcc49
- SSDEEP 1536:182/2N/8fesq5EY5K+h61HMMJccbGX+kl4iZN3bW5bKY:18x8fsEwh61GcRpiH6bKY
- TLSH T11E83D0C2B25787B2C05302702EEBEE7EF32456D0557B6643D784FA3051A34613F7A6AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-21_0cbfcdcf55b1bc8892ca5319dc793518_elex_hello_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_0cbfcdcf55b1bc8892ca5319dc793518_elex_hello_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_0cbfcdcf55b1bc8892ca5319dc793518_elex_hello_wannacry
- Size 84KB
- SHA256 e8d595f80824bccd65108b24e1c28a46c2c0a0b084707eebf506b5e667dd704f
- MD5 0cbfcdcf55b1bc8892ca5319dc793518
- SHA1 420383fc5e3bf539d84691520f8b72593bc8cc9f
- SHA512 65e6a600320703fdcb735b2002728af78b6a86504c7af53bad4fa7c1aec100620553c8e0ee5b3c701fd074cce6239b12bf9e6302065f8378deb941632bfdcc49
- SSDEEP 1536:182/2N/8fesq5EY5K+h61HMMJccbGX+kl4iZN3bW5bKY:18x8fsEwh61GcRpiH6bKY
- TLSH T11E83D0C2B25787B2C05302702EEBEE7EF32456D0557B6643D784FA3051A34613F7A6AA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Family: ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.