General
- Target 2026-08-21_e48c2bad055f1d3e7a62b193e7fe3bf7_elex_wannacry
- Size 72KB
- Sample260821-p5e7caep8v
- SHA256 7f9cda42de189d21b2641dba94112c045d7b1d6860e36a9ec8474670b0be0a87
- MD5 e48c2bad055f1d3e7a62b193e7fe3bf7
- SHA1 274182f6ac1d1b0d29ba4020d1e3413d39d60a97
- SHA512 83954c6c6af2e34290f2820dd832dd3cca601c4be8e7c23ae456f6d55ba9f6091e8eb01555835e5b0a37e4aad86d3f825b89b5fe7a5bb8b1ed22ea8d2f28d9e0
- SSDEEP 1536:dm1n4CrSuwbFKber73hhEiA+pk8oJGap7tED3NbEjlXK4jshvYiW:o1n4/FKbefIUS9HF2D3NY560shvE
- TLSH T12F73D186FBE10421D460177068DB3B328B3679D14412E77A9B31ED59E4EA3A0FC1AB5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_e48c2bad055f1d3e7a62b193e7fe3bf7_elex_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_e48c2bad055f1d3e7a62b193e7fe3bf7_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_e48c2bad055f1d3e7a62b193e7fe3bf7_elex_wannacry
- Size 72KB
- SHA256 7f9cda42de189d21b2641dba94112c045d7b1d6860e36a9ec8474670b0be0a87
- MD5 e48c2bad055f1d3e7a62b193e7fe3bf7
- SHA1 274182f6ac1d1b0d29ba4020d1e3413d39d60a97
- SHA512 83954c6c6af2e34290f2820dd832dd3cca601c4be8e7c23ae456f6d55ba9f6091e8eb01555835e5b0a37e4aad86d3f825b89b5fe7a5bb8b1ed22ea8d2f28d9e0
- SSDEEP 1536:dm1n4CrSuwbFKber73hhEiA+pk8oJGap7tED3NbEjlXK4jshvYiW:o1n4/FKbefIUS9HF2D3NY560shvE
- TLSH T12F73D186FBE10421D460177068DB3B328B3679D14412E77A9B31ED59E4EA3A0FC1AB5F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory