333f46d1acb9a708780acbaf851b44b87202cd7722cb8bf9492b46488462d035

Analysis

max time kernel
150s
max time network
133s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/08/2026, 02:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-22_ae77b6cbb12eaf153446b3c0108937af_amadey_elex_wannacry.exe
Size 84KB
Sample260823-c2e1yssbjc
SHA256 333f46d1acb9a708780acbaf851b44b87202cd7722cb8bf9492b46488462d035
MD5 ae77b6cbb12eaf153446b3c0108937af
SHA1 7762eec185eefb5c2dd5166ed2eddb503a0c476b
SHA512 d947a0e836c83708d82606a95b6b6fa931cc1bf36ea334306d4fbe5812012c658c54df4b0d35a376b367e8fa98f835cb3c1176ce5ae7d419ede17848a5b8ed70
SSDEEP 1536:UpnqPS/1sapjGduHn5qsVsIEVfELAlHa6K0mrdkT9lcP1LOQt4KWZ02ddspaHqaL:5S/1x8uH9Vv08LewxwcPZOQt4KWZ02d/
TLSH
T1E6837D0BF690C8B3E26909F85D2A916AFD7B7E302D584617BEA81F4C9D753C18E0C257
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-08-22_ae77b6cbb12eaf153446b3c0108937af_amadey_elex_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-22_ae77b6cbb12eaf153446b3c0108937af_amadey_elex_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-22_ae77b6cbb12eaf153446b3c0108937af_amadey_elex_wannacry.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2100

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2100-0-0x0000000000400000-0x000000000041B000-memory.dmp

Download