General
- Target 2026-08-21_35f762418e565326e842a62a28294898_elex_wannacry
- Size 82KB
- Sample260821-ncmv2sba94
- SHA256 1d38bb74791fbc3397163015d48953b9b736f37d5d4a2c6ad975de58310ef7b7
- MD5 35f762418e565326e842a62a28294898
- SHA1 44aa5b43b7777e78fedc46c754831dacaad0e0d4
- SHA512 0617afa7a106b0b9474b431c74a2f3938852c527d11c03e6652f3cc7551ea5d8f6bea4dce0aa0cdbff65e431e235d281ecdb69b1253a7f760cb54daac99d6e5c
- SSDEEP 1536:X8tyvrSF+FZOmonEX2Dfpk8oJGap7tED3NWrwpyFrRQN3BsCZrZWSLzwgNoNaaN:styPzouIS9HF2D3NrU8ZsS7CAY
- TLSH T1B783F1C3BFA146D2CC1837B1209773335E61B2E94107FA18A761EC45A5C70B5F89AE9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_35f762418e565326e842a62a28294898_elex_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_35f762418e565326e842a62a28294898_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_35f762418e565326e842a62a28294898_elex_wannacry
- Size 82KB
- SHA256 1d38bb74791fbc3397163015d48953b9b736f37d5d4a2c6ad975de58310ef7b7
- MD5 35f762418e565326e842a62a28294898
- SHA1 44aa5b43b7777e78fedc46c754831dacaad0e0d4
- SHA512 0617afa7a106b0b9474b431c74a2f3938852c527d11c03e6652f3cc7551ea5d8f6bea4dce0aa0cdbff65e431e235d281ecdb69b1253a7f760cb54daac99d6e5c
- SSDEEP 1536:X8tyvrSF+FZOmonEX2Dfpk8oJGap7tED3NWrwpyFrRQN3BsCZrZWSLzwgNoNaaN:styPzouIS9HF2D3NrU8ZsS7CAY
- TLSH T1B783F1C3BFA146D2CC1837B1209773335E61B2E94107FA18A761EC45A5C70B5F89AE9E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory