General
- Target 2026-08-21_f76d38b10fc3cd64cd07c77479e41e4a_elex_wannacry
- Size 73KB
- Sample260821-klnbdswfnc
- SHA256 7210ff3c2ead76a403d579d7ced6f91cc2a10247e4aa854a5920de8e30f94765
- MD5 f76d38b10fc3cd64cd07c77479e41e4a
- SHA1 1cb0572b150dc8e7f33fb1216343fc31363ff014
- SHA512 e6e81d8d2370a48c41ad033682c8f1305518596dbe47cdf96681eb11c5fbb4f7cf88aed54319dda1e4d4f3b8c802b2ef2954dfb381c63e0e61de537055e22e86
- SSDEEP 1536:OGQrSDoYNxR/GHcpk8oJGai7tgD3NYGhRYacNt2g7sfjXfNFio:pp1/GHcS9H+yD3Nfc7sfrfNEo
- TLSH T10373F2CBB7CA40A1CB8CB939138F73778A16A65E6047DF60E723DDD0A912274D45368D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_f76d38b10fc3cd64cd07c77479e41e4a_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_f76d38b10fc3cd64cd07c77479e41e4a_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_f76d38b10fc3cd64cd07c77479e41e4a_elex_wannacry
- Size 73KB
- SHA256 7210ff3c2ead76a403d579d7ced6f91cc2a10247e4aa854a5920de8e30f94765
- MD5 f76d38b10fc3cd64cd07c77479e41e4a
- SHA1 1cb0572b150dc8e7f33fb1216343fc31363ff014
- SHA512 e6e81d8d2370a48c41ad033682c8f1305518596dbe47cdf96681eb11c5fbb4f7cf88aed54319dda1e4d4f3b8c802b2ef2954dfb381c63e0e61de537055e22e86
- SSDEEP 1536:OGQrSDoYNxR/GHcpk8oJGai7tgD3NYGhRYacNt2g7sfjXfNFio:pp1/GHcS9H+yD3Nfc7sfrfNEo
- TLSH T10373F2CBB7CA40A1CB8CB939138F73778A16A65E6047DF60E723DDD0A912274D45368D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE
-
Adds Run key to start application