General
- Target 2026-08-24_ba0295fa71b647b8e8e282a5b35c33b5_elex_wannacry
- Size 64KB
- Sample260825-dbcnkswdnd
- SHA256 a4947fdefd71929b869a20ee08d71dc24406a115314838981978ee97bc63cea5
- MD5 ba0295fa71b647b8e8e282a5b35c33b5
- SHA1 ccc6a58aacc31de9eed628224ae5b1db0f959ed8
- SHA512 14005ac5874b78deafe724256b9dde4f1d640d5b1b9942cb81c396b78a50465b014cba7987458c030eae08a52b8fa2adaf50a910ae3471defba256ef5e73dd14
- SSDEEP 192:ObOzawOs81elJHsc45ecRZOgtShcWaOT2QLrCqwFY04/CFxyNhoy5td:ObLwOs8AHsc4QMfwhKQLro34/CFsrdd
- TLSH T107533CF3C69BCAA3F6E0713F076449745127958853896D9BEB48F91E002BFD1B437286
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-24_ba0295fa71b647b8e8e282a5b35c33b5_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_ba0295fa71b647b8e8e282a5b35c33b5_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_ba0295fa71b647b8e8e282a5b35c33b5_elex_wannacry
- Size 64KB
- SHA256 a4947fdefd71929b869a20ee08d71dc24406a115314838981978ee97bc63cea5
- MD5 ba0295fa71b647b8e8e282a5b35c33b5
- SHA1 ccc6a58aacc31de9eed628224ae5b1db0f959ed8
- SHA512 14005ac5874b78deafe724256b9dde4f1d640d5b1b9942cb81c396b78a50465b014cba7987458c030eae08a52b8fa2adaf50a910ae3471defba256ef5e73dd14
- SSDEEP 192:ObOzawOs81elJHsc45ecRZOgtShcWaOT2QLrCqwFY04/CFxyNhoy5td:ObLwOs8AHsc4QMfwhKQLro34/CFsrdd
- TLSH T107533CF3C69BCAA3F6E0713F076449745127958853896D9BEB48F91E002BFD1B437286
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE