General
- Target 2026-08-21_d49f3a7b8037c6508db91e9fc6997c48_elex_wannacry
- Size 64KB
- Sample260822-fp1zfa1dmb
- SHA256 517ff8b11b6a9ce93d6043973832f398d983f9076ad95a54a390a87d9b201145
- MD5 d49f3a7b8037c6508db91e9fc6997c48
- SHA1 0aed72d233f27ddd65bd571a48c8614415daf944
- SHA512 33afb4b152257f661f4476c90e6dc2ca015c318a4107a58eb15a234858ee1e1692cde261b92d0b409bcca0d3079be164085041904925277f84e82069bc84c793
- SSDEEP 192:ObOzawOs81elJHsc45ecRZOgtShcWaOT2QLrCqwSY04/CFxyNhoy5td:ObLwOs8AHsc4QMfwhKQLroo4/CFsrdd
- TLSH T1AF533BF3C69BCAA3F6E0713F07644A745127958853896D9BEB48F91E002BFD1B437286
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-21_d49f3a7b8037c6508db91e9fc6997c48_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_d49f3a7b8037c6508db91e9fc6997c48_elex_wannacry.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_d49f3a7b8037c6508db91e9fc6997c48_elex_wannacry
- Size 64KB
- SHA256 517ff8b11b6a9ce93d6043973832f398d983f9076ad95a54a390a87d9b201145
- MD5 d49f3a7b8037c6508db91e9fc6997c48
- SHA1 0aed72d233f27ddd65bd571a48c8614415daf944
- SHA512 33afb4b152257f661f4476c90e6dc2ca015c318a4107a58eb15a234858ee1e1692cde261b92d0b409bcca0d3079be164085041904925277f84e82069bc84c793
- SSDEEP 192:ObOzawOs81elJHsc45ecRZOgtShcWaOT2QLrCqwSY04/CFxyNhoy5td:ObLwOs8AHsc4QMfwhKQLroo4/CFsrdd
- TLSH T1AF533BF3C69BCAA3F6E0713F07644A745127958853896D9BEB48F91E002BFD1B437286
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE