General
- Target 2026-08-24_d3e7ef3834595b1e35e8578799030e69_elex_wannacry
- Size 260KB
- Sample260825-ab7beavfka
- SHA256 6eea00ca3ce102567ea4d4daaa90602b9bbbe96b3f537a450419222dfcf0c496
- MD5 d3e7ef3834595b1e35e8578799030e69
- SHA1 bcedbc79dcbb79daf01c21d1fc1f65aab55e7969
- SHA512 6d2d6a4de86b4e5c2fb6744c56b5e7024607f43775e04525e02c724af59e3d9f98e554f7965134e201e2492768a3595336221e8bc452364750dc8c4c86f11df2
- SSDEEP 1536:2LpMmMLpuflKYU+zlfNje10RbEqrecx/lehkGyDUJPeJEBXbH9AETT9yCINkH0pO:2LpMmMLpqlzogXiU/0y0eyBbT/E
- TLSH T1A644F042A9BFBC90CD5B413B21617E37FB341394443BEDBB60F852E61AF80E6A119113
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_d3e7ef3834595b1e35e8578799030e69_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_d3e7ef3834595b1e35e8578799030e69_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_d3e7ef3834595b1e35e8578799030e69_elex_wannacry
- Size 260KB
- SHA256 6eea00ca3ce102567ea4d4daaa90602b9bbbe96b3f537a450419222dfcf0c496
- MD5 d3e7ef3834595b1e35e8578799030e69
- SHA1 bcedbc79dcbb79daf01c21d1fc1f65aab55e7969
- SHA512 6d2d6a4de86b4e5c2fb6744c56b5e7024607f43775e04525e02c724af59e3d9f98e554f7965134e201e2492768a3595336221e8bc452364750dc8c4c86f11df2
- SSDEEP 1536:2LpMmMLpuflKYU+zlfNje10RbEqrecx/lehkGyDUJPeJEBXbH9AETT9yCINkH0pO:2LpMmMLpqlzogXiU/0y0eyBbT/E
- TLSH T1A644F042A9BFBC90CD5B413B21617E37FB341394443BEDBB60F852E61AF80E6A119113
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination manipulating RDP / Terminal Services
-
Server Software Component: Terminal Services DLL
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory