General
- Target 2026-08-21_ab3c36b0fa61368f33c324085e9a3364_elex_wannacry
- Size 90KB
- Sample260821-h7ev2avgle
- SHA256 f92e687a8440e70e378256f8ed0c30700d0883999986233283d3ea0ac0b1637f
- MD5 ab3c36b0fa61368f33c324085e9a3364
- SHA1 832a82575eef4c515b8b687a049a7de24e3d3b84
- SHA512 78a68fcae9a7eece05c7c723049b825bd92ee75c2ddcb59420cf8322d40e4ed8ffbabced7dd74b50958cc4cd06ef9dba2ed562cfec11f37fed77fee29a6946cf
- SSDEEP 1536:7m1n4CrSuwb273hhEiA+pk8oJGap7tED3Npg5xtuBLkRtH1o85gHQUxyFesiLyza:C1n4/IIUS9HF2D3Npg5oLM/mxyiLyzu7
- TLSH T1D793018BFE6919B2C845127471D73AB1CF70A2C98181F911E734FCA6A8DD1B0A815E8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_ab3c36b0fa61368f33c324085e9a3364_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_ab3c36b0fa61368f33c324085e9a3364_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_ab3c36b0fa61368f33c324085e9a3364_elex_wannacry
- Size 90KB
- SHA256 f92e687a8440e70e378256f8ed0c30700d0883999986233283d3ea0ac0b1637f
- MD5 ab3c36b0fa61368f33c324085e9a3364
- SHA1 832a82575eef4c515b8b687a049a7de24e3d3b84
- SHA512 78a68fcae9a7eece05c7c723049b825bd92ee75c2ddcb59420cf8322d40e4ed8ffbabced7dd74b50958cc4cd06ef9dba2ed562cfec11f37fed77fee29a6946cf
- SSDEEP 1536:7m1n4CrSuwb273hhEiA+pk8oJGap7tED3Npg5xtuBLkRtH1o85gHQUxyFesiLyza:C1n4/IIUS9HF2D3Npg5oLM/mxyiLyzu7
- TLSH T1D793018BFE6919B2C845127471D73AB1CF70A2C98181F911E734FCA6A8DD1B0A815E8F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory