General
- Target 2026-08-21_3110a216ede756d936aef771f25474a6_elex_wannacry
- Size 65KB
- Sample260822-vh4jbaff57
- SHA256 59e9ac856c2b38f15ab01e54a9f921c58f7689c4d35407fae654cebd2879da98
- MD5 3110a216ede756d936aef771f25474a6
- SHA1 fb0d2dd90df82816eb75f3464b4da460e527981d
- SHA512 58cdd5c55f3dc0bb9c3ff2d26e4d34611375a1150190af779783a287c1550e3b47c1606702d3a5fbd6560f70980471f8d7f9971986113ed28b6180beeda25692
- SSDEEP 1536:OGQrSDoYNxR/GHcpk8oJGai7tgD3NdjRbOuVdoZknIOzAe1:pp1/GHcS9H+yD3N/bNikIHq
- TLSH T10C63E1CBFFCA44A0CA58BB78110FA3738E66925E11029B04F7A5DCF1D553178E84666F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_3110a216ede756d936aef771f25474a6_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_3110a216ede756d936aef771f25474a6_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_3110a216ede756d936aef771f25474a6_elex_wannacry
- Size 65KB
- SHA256 59e9ac856c2b38f15ab01e54a9f921c58f7689c4d35407fae654cebd2879da98
- MD5 3110a216ede756d936aef771f25474a6
- SHA1 fb0d2dd90df82816eb75f3464b4da460e527981d
- SHA512 58cdd5c55f3dc0bb9c3ff2d26e4d34611375a1150190af779783a287c1550e3b47c1606702d3a5fbd6560f70980471f8d7f9971986113ed28b6180beeda25692
- SSDEEP 1536:OGQrSDoYNxR/GHcpk8oJGai7tgD3NdjRbOuVdoZknIOzAe1:pp1/GHcS9H+yD3N/bNikIHq
- TLSH T10C63E1CBFFCA44A0CA58BB78110FA3738E66925E11029B04F7A5DCF1D553178E84666F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE
-
Adds Run key to start application