General
- Target 2026-08-22_97e7dfc7e601e258252fc43705d1a06c_elex_wannacry
- Size 1.7MB
- Sample260823-e1yg1ssfnd
- SHA256 0b7cec231075f6c555e5c4e679cd3d05bdd752fed225f3fe324f453a62bc9313
- MD5 97e7dfc7e601e258252fc43705d1a06c
- SHA1 820498087bdc94cbcd80e64d36697c2849e65969
- SHA512 776615823b7bfa975ee938a91e20ed65ec7387d9b65605f8c12647900ce064fa0e87d6ffd0656efe36c2111d0a457719c3a27351208cff6ff58c8630c250f2f1
- SSDEEP 24576:u0+tcbVqmaBOl76mqPKAYVKqW6Zfhw9w8L4u+sp09PwssTXgUvvPAaArfhNcvoiE:2qbVOwemQKVKAB+0opL7TwUfAPrfDiE
- TLSH T1AC85334CF1A6BC31DD002B35812B773B9A182DD459BCDD306B3A067495EE3AFB249B94
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-22_97e7dfc7e601e258252fc43705d1a06c_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_97e7dfc7e601e258252fc43705d1a06c_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_97e7dfc7e601e258252fc43705d1a06c_elex_wannacry
- Size 1.7MB
- SHA256 0b7cec231075f6c555e5c4e679cd3d05bdd752fed225f3fe324f453a62bc9313
- MD5 97e7dfc7e601e258252fc43705d1a06c
- SHA1 820498087bdc94cbcd80e64d36697c2849e65969
- SHA512 776615823b7bfa975ee938a91e20ed65ec7387d9b65605f8c12647900ce064fa0e87d6ffd0656efe36c2111d0a457719c3a27351208cff6ff58c8630c250f2f1
- SSDEEP 24576:u0+tcbVqmaBOl76mqPKAYVKqW6Zfhw9w8L4u+sp09PwssTXgUvvPAaArfhNcvoiE:2qbVOwemQKVKAB+0opL7TwUfAPrfDiE
- TLSH T1AC85334CF1A6BC31DD002B35812B773B9A182DD459BCDD306B3A067495EE3AFB249B94
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory