General
- Target 2026-08-21_f4de14b064d0937e94c037cc6a92f62f_elex_wannacry
- Size 16KB
- Sample260821-plergazeld
- SHA256 5e2f0c663c0bcfbc17a98e94389fdc1c8a0a3aa3cc66b5b1c6a8c126e209001e
- MD5 f4de14b064d0937e94c037cc6a92f62f
- SHA1 c54980794e93ee618ccc596504536d09b18fa308
- SHA512 355c66290182999b93782c7a92531dc9876e76e91d016a501a912601f8b67a941cae0dcbc15a2c5ea93c4973b82f9ec643098f99fbc64656f504fbc3121493eb
- SSDEEP 192:uTk5WckBezHYQRPK6k7TjHwCl1oynzc2Fjmf2mrETLLC0qmtBUPN2Rp8Jim5Trsp:uTQWckBeEd6ml1pcg79UP4EJzZsxPH
- TLSH T16472A4395AD40C73E3FBC3F581F7C1DAA861B42B37035D2E94852B892D23B12AC9169D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-21_f4de14b064d0937e94c037cc6a92f62f_elex_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_f4de14b064d0937e94c037cc6a92f62f_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_f4de14b064d0937e94c037cc6a92f62f_elex_wannacry
- Size 16KB
- SHA256 5e2f0c663c0bcfbc17a98e94389fdc1c8a0a3aa3cc66b5b1c6a8c126e209001e
- MD5 f4de14b064d0937e94c037cc6a92f62f
- SHA1 c54980794e93ee618ccc596504536d09b18fa308
- SHA512 355c66290182999b93782c7a92531dc9876e76e91d016a501a912601f8b67a941cae0dcbc15a2c5ea93c4973b82f9ec643098f99fbc64656f504fbc3121493eb
- SSDEEP 192:uTk5WckBezHYQRPK6k7TjHwCl1oynzc2Fjmf2mrETLLC0qmtBUPN2Rp8Jim5Trsp:uTQWckBeEd6ml1pcg79UP4EJzZsxPH
- TLSH T16472A4395AD40C73E3FBC3F581F7C1DAA861B42B37035D2E94852B892D23B12AC9169D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Waski payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE