General
- Target 2026-08-21_86f82592033f2a98e0df6254671a081b_elex_wannacry
- Size 96KB
- Sample260822-nbpm9ax1az
- SHA256 1d1e63972fc574a82e82dc693f20d541b6c8fb11e37d75609688b883ba39220a
- MD5 86f82592033f2a98e0df6254671a081b
- SHA1 80f4e010e32d3ea1a77765b5a1119cb11efbd35c
- SHA512 7ecc499eb22e88bdeb0a9a8a36ffcc5c8480a7cea59fbf9cddd35af10a56c2214965c54867433cd75229fd0977935a775d8f3c8414c4abb62da9ebaf9c96bfce
- SSDEEP 1536:X8tyvrSF+FZOmonEX2Dfpk8oJGap7tED3N/EhRYLULo8GGKRJMIV/LSQWZQlQ4QE:styPzouIS9HF2D3N/U8I0GiYZQ7d
- TLSH T13DA302CB7C4A59A0E62075B4348AA7374F3072E2E142F66AA711DCB5DACB131F44794E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_86f82592033f2a98e0df6254671a081b_elex_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_86f82592033f2a98e0df6254671a081b_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_86f82592033f2a98e0df6254671a081b_elex_wannacry
- Size 96KB
- SHA256 1d1e63972fc574a82e82dc693f20d541b6c8fb11e37d75609688b883ba39220a
- MD5 86f82592033f2a98e0df6254671a081b
- SHA1 80f4e010e32d3ea1a77765b5a1119cb11efbd35c
- SHA512 7ecc499eb22e88bdeb0a9a8a36ffcc5c8480a7cea59fbf9cddd35af10a56c2214965c54867433cd75229fd0977935a775d8f3c8414c4abb62da9ebaf9c96bfce
- SSDEEP 1536:X8tyvrSF+FZOmonEX2Dfpk8oJGap7tED3N/EhRYLULo8GGKRJMIV/LSQWZQlQ4QE:styPzouIS9HF2D3N/U8I0GiYZQ7d
- TLSH T13DA302CB7C4A59A0E62075B4348AA7374F3072E2E142F66AA711DCB5DACB131F44794E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory