General
- Target 2026-08-23_9a6b3cb75c1c7a966a3c6df68c677e73_elex_wannacry
- Size 85KB
- Sample260824-eskk7aca83
- SHA256 e969dbddba192db93be40c82b85b20eebcf4ef7ccb20fe0cd7625c71fa0c7ffe
- MD5 9a6b3cb75c1c7a966a3c6df68c677e73
- SHA1 b298eaee5fe9cd6064fd0b2b920c1500be1eb4a0
- SHA512 cbb1c6b51286ae786b256b639d1549af8f15969f9f41494ae420043cef157cca1f4f13aa928b8b2e1b5c4a2328e4275f7161557095278dbe207c8386281a7903
- SSDEEP 1536:7m1n4CrSuwb273hhEiA+pk8oJGap7tED3NthRYvNxKxChSeGr4bR0FlT7KVs2+RL:C1n4/IIUS9HF2D3NkNxiChVToFKVscs9
- TLSH T18783F193FFAB0871C808617135CBB6774B21A5D50141E559EB2ADCF164CB2B0E41EE4F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_9a6b3cb75c1c7a966a3c6df68c677e73_elex_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_9a6b3cb75c1c7a966a3c6df68c677e73_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_9a6b3cb75c1c7a966a3c6df68c677e73_elex_wannacry
- Size 85KB
- SHA256 e969dbddba192db93be40c82b85b20eebcf4ef7ccb20fe0cd7625c71fa0c7ffe
- MD5 9a6b3cb75c1c7a966a3c6df68c677e73
- SHA1 b298eaee5fe9cd6064fd0b2b920c1500be1eb4a0
- SHA512 cbb1c6b51286ae786b256b639d1549af8f15969f9f41494ae420043cef157cca1f4f13aa928b8b2e1b5c4a2328e4275f7161557095278dbe207c8386281a7903
- SSDEEP 1536:7m1n4CrSuwb273hhEiA+pk8oJGap7tED3NthRYvNxKxChSeGr4bR0FlT7KVs2+RL:C1n4/IIUS9HF2D3NkNxiChVToFKVscs9
- TLSH T18783F193FFAB0871C808617135CBB6774B21A5D50141E559EB2ADCF164CB2B0E41EE4F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory