General
- Target 2026-08-21_52dd954fce6dbbbf164ef9950669f3ac_elex_upatre_wannacry
- Size 43KB
- Sample260822-se9j2swakd
- SHA256 9825c6810a97680185e2462daf167a22b7bc9a4f472d45f6d927bea928f4afcb
- MD5 52dd954fce6dbbbf164ef9950669f3ac
- SHA1 c284e0186fcc56bf7473f07c809059fd8a0b1612
- SHA512 f83c54ea7cddbde56d28bdb5efbaa4c900b9dc9545a799e6c9f2f53b415794789d3d022288441be36033f59a21cc2bdf6918ac873683656fa6ca91cc609b2c0f
- SSDEEP 768:xW9+F8BPtYggggggLvggggggggUaocdvoknj3+eGjm:eaokbnzYS
- TLSH T13113CC742AD41572E37B9E7685F251CEA96C7C233A03584E40B1F3440BF3BD2AEA1A5D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-21_52dd954fce6dbbbf164ef9950669f3ac_elex_upatre_wannacry.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_52dd954fce6dbbbf164ef9950669f3ac_elex_upatre_wannacry.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_52dd954fce6dbbbf164ef9950669f3ac_elex_upatre_wannacry
- Size 43KB
- SHA256 9825c6810a97680185e2462daf167a22b7bc9a4f472d45f6d927bea928f4afcb
- MD5 52dd954fce6dbbbf164ef9950669f3ac
- SHA1 c284e0186fcc56bf7473f07c809059fd8a0b1612
- SHA512 f83c54ea7cddbde56d28bdb5efbaa4c900b9dc9545a799e6c9f2f53b415794789d3d022288441be36033f59a21cc2bdf6918ac873683656fa6ca91cc609b2c0f
- SSDEEP 768:xW9+F8BPtYggggggLvggggggggUaocdvoknj3+eGjm:eaokbnzYS
- TLSH T13113CC742AD41572E37B9E7685F251CEA96C7C233A03584E40B1F3440BF3BD2AEA1A5D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE