General
- Target 2026-08-22_b76b01cbc24a253d6ba78df7f08c014f_elex_wannacry
- Size 75KB
- Sample260823-cat1ss1grg
- SHA256 c4b74161faa610faad141af3a19f8796e66ce41c23e83aab1ba6a81ad67d156d
- MD5 b76b01cbc24a253d6ba78df7f08c014f
- SHA1 bdfedbbdd2fa76ad8991dcc8bdcc57bac96d5956
- SHA512 0f6f20d667fc52ecdc45dfcc3cda5a629045a122f9935bae43174aa3763486743568ea152a1656f11e6d8ab15fa0370260dc78f97d2eb254d5dee6fe4d8dd0ce
- SSDEEP 1536:Gm1n4CrSuwb1w73hhEiA+pk8oJGap7tED3NRhRYMLwUQQvT7VvaFQK:h1n4/1GIUS9HF2D3NIUT9lK
- TLSH T16D73E193BBA71971DC463571669BB3320F21FDD44401F525AF72EC267CEA260E822B4E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-22_b76b01cbc24a253d6ba78df7f08c014f_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_b76b01cbc24a253d6ba78df7f08c014f_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_b76b01cbc24a253d6ba78df7f08c014f_elex_wannacry
- Size 75KB
- SHA256 c4b74161faa610faad141af3a19f8796e66ce41c23e83aab1ba6a81ad67d156d
- MD5 b76b01cbc24a253d6ba78df7f08c014f
- SHA1 bdfedbbdd2fa76ad8991dcc8bdcc57bac96d5956
- SHA512 0f6f20d667fc52ecdc45dfcc3cda5a629045a122f9935bae43174aa3763486743568ea152a1656f11e6d8ab15fa0370260dc78f97d2eb254d5dee6fe4d8dd0ce
- SSDEEP 1536:Gm1n4CrSuwb1w73hhEiA+pk8oJGap7tED3NRhRYMLwUQQvT7VvaFQK:h1n4/1GIUS9HF2D3NIUT9lK
- TLSH T16D73E193BBA71971DC463571669BB3320F21FDD44401F525AF72EC267CEA260E822B4E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory