General
- Target 2026-08-22_d2dec3086957e1c4c5b2b4edc5d28f3d_elex_wannacry
- Size 86KB
- Sample260822-3qj4ms1bjd
- SHA256 eac4a55a776bf673beab16fc399617f19c0119a41065870c3fc9a0e402103323
- MD5 d2dec3086957e1c4c5b2b4edc5d28f3d
- SHA1 186d488a6e88845f8ab577c33739fde2184cfc34
- SHA512 6d8a25f945ae53bbba3586b10ed6f5f1f884ded39d1c92e4be6323d32d4f52868ec9736f7c99cd0673188b1120b1c4785d0dbb42907342cf5588dfa14f3da34c
- SSDEEP 1536:7m1n4CrSuwb273hhEiA+pk8oJGap7tED3NmiCpsrKK9jeNmgS67DbPb85UzR6Pey:C1n4/IIUS9HF2D3N/dKKhSR74KzZDO
- TLSH T1B883F15B7F964972C93423B81097BBB7CA6260D54481E6B4EF3ACC55E4CB1F0DC09A1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-22_d2dec3086957e1c4c5b2b4edc5d28f3d_elex_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_d2dec3086957e1c4c5b2b4edc5d28f3d_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_d2dec3086957e1c4c5b2b4edc5d28f3d_elex_wannacry
- Size 86KB
- SHA256 eac4a55a776bf673beab16fc399617f19c0119a41065870c3fc9a0e402103323
- MD5 d2dec3086957e1c4c5b2b4edc5d28f3d
- SHA1 186d488a6e88845f8ab577c33739fde2184cfc34
- SHA512 6d8a25f945ae53bbba3586b10ed6f5f1f884ded39d1c92e4be6323d32d4f52868ec9736f7c99cd0673188b1120b1c4785d0dbb42907342cf5588dfa14f3da34c
- SSDEEP 1536:7m1n4CrSuwb273hhEiA+pk8oJGap7tED3NmiCpsrKK9jeNmgS67DbPb85UzR6Pey:C1n4/IIUS9HF2D3N/dKKhSR74KzZDO
- TLSH T1B883F15B7F964972C93423B81097BBB7CA6260D54481E6B4EF3ACC55E4CB1F0DC09A1B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory