General
- Target 2026-08-21_38c9d044f953c0afbe080ea02bf02262_elex_wannacry
- Size 168KB
- Sample260821-xqp21aware
- SHA256 2ce56587404e6cb28f69232926208d2a4575b44bad9fc9f98f102fb60f3fb56d
- MD5 38c9d044f953c0afbe080ea02bf02262
- SHA1 1fd98de9b3686f4ef2a7f780b440dc9aba2acf69
- SHA512 9615f82f985b08de5327ef3cfa97ea731c37c2eadbef8f3a555e6047ec0ba9a949f4553f00bc3da91e1e1c53fb3bf2957a15b1fbebb71b96422e391028ebd70b
- SSDEEP 192:pbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqw2Ur4/CFxyNhoy5t:pbLwOs8AHsc4sMfwhKQLroLr4/CFsrd
- TLSH T14BF319834BDE5CF3FB911130087D8AB9927B99D4960EBEEF6B90CD250077292D53A50B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-21_38c9d044f953c0afbe080ea02bf02262_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_38c9d044f953c0afbe080ea02bf02262_elex_wannacry.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_38c9d044f953c0afbe080ea02bf02262_elex_wannacry
- Size 168KB
- SHA256 2ce56587404e6cb28f69232926208d2a4575b44bad9fc9f98f102fb60f3fb56d
- MD5 38c9d044f953c0afbe080ea02bf02262
- SHA1 1fd98de9b3686f4ef2a7f780b440dc9aba2acf69
- SHA512 9615f82f985b08de5327ef3cfa97ea731c37c2eadbef8f3a555e6047ec0ba9a949f4553f00bc3da91e1e1c53fb3bf2957a15b1fbebb71b96422e391028ebd70b
- SSDEEP 192:pbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqw2Ur4/CFxyNhoy5t:pbLwOs8AHsc4sMfwhKQLroLr4/CFsrd
- TLSH T14BF319834BDE5CF3FB911130087D8AB9927B99D4960EBEEF6B90CD250077292D53A50B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE