General
- Target 2026-08-22_113b9f1f9780ef04aae3b88a5c9eb5a6_elex_wannacry
- Size 77KB
- Sample260823-ppntjswglc
- SHA256 1a82f10cb771063fd0f53c8de979a0a0383ff5b29ea8b406149ee82a0212df42
- MD5 113b9f1f9780ef04aae3b88a5c9eb5a6
- SHA1 47a3107bc2ad8dd78416dac17a0beb13697a1a08
- SHA512 81f078d2cdcc7b45c0c7f4fe060cff010a456a15c9092e849b67100a7f5519f0a4aa18147339b3cb4d313f4edda4e9230295ff8a578d2e75f16f3a80f31164a2
- SSDEEP 1536:7m1n4CrSuwb273hhEiA+pk8oJGap7tED3N510pbtcdGXdo9hq+voGJ:C1n4/IIUS9HF2D3Nj05tcoXd2hJJ
- TLSH T1F473F19BFEA910F2CC202634788B73728A2575D54281F568EB3BECF665CF160D814E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-22_113b9f1f9780ef04aae3b88a5c9eb5a6_elex_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_113b9f1f9780ef04aae3b88a5c9eb5a6_elex_wannacry.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_113b9f1f9780ef04aae3b88a5c9eb5a6_elex_wannacry
- Size 77KB
- SHA256 1a82f10cb771063fd0f53c8de979a0a0383ff5b29ea8b406149ee82a0212df42
- MD5 113b9f1f9780ef04aae3b88a5c9eb5a6
- SHA1 47a3107bc2ad8dd78416dac17a0beb13697a1a08
- SHA512 81f078d2cdcc7b45c0c7f4fe060cff010a456a15c9092e849b67100a7f5519f0a4aa18147339b3cb4d313f4edda4e9230295ff8a578d2e75f16f3a80f31164a2
- SSDEEP 1536:7m1n4CrSuwb273hhEiA+pk8oJGap7tED3N510pbtcdGXdo9hq+voGJ:C1n4/IIUS9HF2D3Nj05tcoXd2hJJ
- TLSH T1F473F19BFEA910F2CC202634788B73728A2575D54281F568EB3BECF665CF160D814E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory