General
- Target 2026-08-22_a6251d08fd581e481d6c573549ae154c_elex_wannacry
- Size 59KB
- Sample260823-dq5ynshb73
- SHA256 b2887daad2adf898e5189f011c8424ed04edfa9d3feadf036554bf1ed1b73625
- MD5 a6251d08fd581e481d6c573549ae154c
- SHA1 695ff224b59f12c6f4483f4b31f0ca076702e073
- SHA512 6c7cf45491d53df8a24477e093184146e1ae71f8451c60a32ebf4386d5eef44eb6d9f44373272519ce31a28b012ceb05a628ffe5cf5effbc05c56041063f69eb
- SSDEEP 1536:7m1n4CrSuwb273hhEiA+pk8oJGap7tED3Nog2AvUHepDhL:C1n4/IIUS9HF2D3N9jhL
- TLSH T1DD53E0D7FEA540B2C86422B13AD77B738B2461C44005F579EB36EC66A8DE1B1F418E4B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-22_a6251d08fd581e481d6c573549ae154c_elex_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_a6251d08fd581e481d6c573549ae154c_elex_wannacry.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_a6251d08fd581e481d6c573549ae154c_elex_wannacry
- Size 59KB
- SHA256 b2887daad2adf898e5189f011c8424ed04edfa9d3feadf036554bf1ed1b73625
- MD5 a6251d08fd581e481d6c573549ae154c
- SHA1 695ff224b59f12c6f4483f4b31f0ca076702e073
- SHA512 6c7cf45491d53df8a24477e093184146e1ae71f8451c60a32ebf4386d5eef44eb6d9f44373272519ce31a28b012ceb05a628ffe5cf5effbc05c56041063f69eb
- SSDEEP 1536:7m1n4CrSuwb273hhEiA+pk8oJGap7tED3Nog2AvUHepDhL:C1n4/IIUS9HF2D3N9jhL
- TLSH T1DD53E0D7FEA540B2C86422B13AD77B738B2461C44005F579EB36EC66A8DE1B1F418E4B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory