General
- Target 2026-08-22_ecf6a09a736454e1aef5e6800badb9c1_elex_wannacry
- Size 90KB
- Sample260822-1rmvtage86
- SHA256 9b181671d8e8f2ebe0895148a278b418f80852f7f800d93451597f3c6ad72956
- MD5 ecf6a09a736454e1aef5e6800badb9c1
- SHA1 7106ed0de47ba93d8bdae3ec9295f69805fcc243
- SHA512 e8a95daa20932224ae461fb7c4e267f590a6c6e431fff04c234e2390446f2624fed435b78cd0ab9006e7b3b5d69efd92388e6ffdc7e27e8fe3619bf6fcbb3ad1
- SSDEEP 768:Qvw9816vhKQLro84/wQRNrfrunMxVFA3b7glw:YEGh0o8l2unMxVS3Hg
- TLSH T1E493C53D5DDA103BE2B7D6B585F126E3FE66B9833A091D0E46D243428C23B53AD86C1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-22_ecf6a09a736454e1aef5e6800badb9c1_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_ecf6a09a736454e1aef5e6800badb9c1_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_ecf6a09a736454e1aef5e6800badb9c1_elex_wannacry
- Size 90KB
- SHA256 9b181671d8e8f2ebe0895148a278b418f80852f7f800d93451597f3c6ad72956
- MD5 ecf6a09a736454e1aef5e6800badb9c1
- SHA1 7106ed0de47ba93d8bdae3ec9295f69805fcc243
- SHA512 e8a95daa20932224ae461fb7c4e267f590a6c6e431fff04c234e2390446f2624fed435b78cd0ab9006e7b3b5d69efd92388e6ffdc7e27e8fe3619bf6fcbb3ad1
- SSDEEP 768:Qvw9816vhKQLro84/wQRNrfrunMxVFA3b7glw:YEGh0o8l2unMxVS3Hg
- TLSH T1E493C53D5DDA103BE2B7D6B585F126E3FE66B9833A091D0E46D243428C23B53AD86C1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE