General
- Target 2026-08-21_a062e5c88f0073730cdcf26b0ca10a42_elex_wannacry
- Size 79KB
- Sample260822-k56bbashja
- SHA256 1068be458382dccb32c26fa053477af0cd91e541e23dacaf4815e3f830e187ee
- MD5 a062e5c88f0073730cdcf26b0ca10a42
- SHA1 96982a05e4f99b8c19ad9ac4cba7f8581c3ee165
- SHA512 cf934349ae45d904a92e0a83d52ac435f84a5c70aaf9fc3a1b3b9d637b787e6ad3dc33afbb9d58e59036051c01221964a204b9da5dc296de4afa36ccb73bb4c5
- SSDEEP 1536:r8tyvrSF+F2eOmonEX2Dfpk8oJGap7tED3NdhRYZndZ/1W4hJ2+RQDm/o:YtyP2mouIS9HF2D3NUnD/1XhJc6/o
- TLSH T11783F183BEA64192D5291A30248BE7365E127CD58502E56AF723FD2D5CFA234F8478CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_a062e5c88f0073730cdcf26b0ca10a42_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_a062e5c88f0073730cdcf26b0ca10a42_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_a062e5c88f0073730cdcf26b0ca10a42_elex_wannacry
- Size 79KB
- SHA256 1068be458382dccb32c26fa053477af0cd91e541e23dacaf4815e3f830e187ee
- MD5 a062e5c88f0073730cdcf26b0ca10a42
- SHA1 96982a05e4f99b8c19ad9ac4cba7f8581c3ee165
- SHA512 cf934349ae45d904a92e0a83d52ac435f84a5c70aaf9fc3a1b3b9d637b787e6ad3dc33afbb9d58e59036051c01221964a204b9da5dc296de4afa36ccb73bb4c5
- SSDEEP 1536:r8tyvrSF+F2eOmonEX2Dfpk8oJGap7tED3NdhRYZndZ/1W4hJ2+RQDm/o:YtyP2mouIS9HF2D3NUnD/1XhJc6/o
- TLSH T11783F183BEA64192D5291A30248BE7365E127CD58502E56AF723FD2D5CFA234F8478CE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory