General
- Target 2026-08-22_4b18a71a793528e3ec9581a1a748c950_elex_wannacry
- Size 64KB
- Sample260823-krvmnafn4w
- SHA256 1a301d91c71be18700e33773204f78531a5179f7be1990ad8aedaacd6d73a1f8
- MD5 4b18a71a793528e3ec9581a1a748c950
- SHA1 65b0165015c88c903fe6f1585bc8115c1747fca9
- SHA512 51390c3ae3e38c9d2a2fe475c5cac6391c67a366dc86381257bdbbc6fa76ad436b6cc69e0b12cb1b0dce47c84ba3c720a5737993c0cd5fa8579c3984fa53dae4
- SSDEEP 192:ObOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwlY04/CFxyNhoy5tT:ObLwOs8AHsc4sMfwhKQLroX4/CFsrdT
- TLSH T13553404A269544A3F94AB1B82CE44D7C61AF55C050296B7AE7E0EB232327DE1D42F20F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-22_4b18a71a793528e3ec9581a1a748c950_elex_wannacry.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_4b18a71a793528e3ec9581a1a748c950_elex_wannacry.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_4b18a71a793528e3ec9581a1a748c950_elex_wannacry
- Size 64KB
- SHA256 1a301d91c71be18700e33773204f78531a5179f7be1990ad8aedaacd6d73a1f8
- MD5 4b18a71a793528e3ec9581a1a748c950
- SHA1 65b0165015c88c903fe6f1585bc8115c1747fca9
- SHA512 51390c3ae3e38c9d2a2fe475c5cac6391c67a366dc86381257bdbbc6fa76ad436b6cc69e0b12cb1b0dce47c84ba3c720a5737993c0cd5fa8579c3984fa53dae4
- SSDEEP 192:ObOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwlY04/CFxyNhoy5tT:ObLwOs8AHsc4sMfwhKQLroX4/CFsrdT
- TLSH T13553404A269544A3F94AB1B82CE44D7C61AF55C050296B7AE7E0EB232327DE1D42F20F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE