General
- Target 2026-08-21_c811890e9cb88af7ee8ad8b8f5d68be8_elex_wannacry
- Size 60KB
- Sample260821-rbe1la1fpc
- SHA256 6b472499388c6c082ca92db658c42f886a5f27b0438b0886b699641514ddbf16
- MD5 c811890e9cb88af7ee8ad8b8f5d68be8
- SHA1 24c2dc32b119c043e69c933c0e70300e61e7590e
- SHA512 6d5992a9be280fda2cf0c5488c724c456b9b64b364104546b0dbb5bf65ca08b616ef00a6fcd92055bcf4a5d2938facf9670d772be6c19bcd44154919a6afe95a
- SSDEEP 192:pbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwhY04/CFxyNhoy5t:pbLwOs8AHsc4sMfwhKQLroT4/CFsrd
- TLSH T1375309834BEE9CF2F791113108794AB9927B99D4910DBEDFBF90CD154037292E53A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-21_c811890e9cb88af7ee8ad8b8f5d68be8_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_c811890e9cb88af7ee8ad8b8f5d68be8_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_c811890e9cb88af7ee8ad8b8f5d68be8_elex_wannacry
- Size 60KB
- SHA256 6b472499388c6c082ca92db658c42f886a5f27b0438b0886b699641514ddbf16
- MD5 c811890e9cb88af7ee8ad8b8f5d68be8
- SHA1 24c2dc32b119c043e69c933c0e70300e61e7590e
- SHA512 6d5992a9be280fda2cf0c5488c724c456b9b64b364104546b0dbb5bf65ca08b616ef00a6fcd92055bcf4a5d2938facf9670d772be6c19bcd44154919a6afe95a
- SSDEEP 192:pbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwhY04/CFxyNhoy5t:pbLwOs8AHsc4sMfwhKQLroT4/CFsrd
- TLSH T1375309834BEE9CF2F791113108794AB9927B99D4910DBEDFBF90CD154037292E53A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE