General
- Target 2026-08-24_9024ed82db912c3bdfedaec7782671b5_elex_wannacry
- Size 80KB
- Sample260825-jh57csvsaz
- SHA256 c2948b97e9feea8a0575c371e20df2d0ac076f118f007f1be92ade8646c6ca9d
- MD5 9024ed82db912c3bdfedaec7782671b5
- SHA1 53da34bb14afdc761818270fcedc579f3c3bf30a
- SHA512 7d639f528a941ed0aba6c15fe72b6def3b9ffe54a94a297dcf03e3a524801f806526530025813f466ebe07d1ba5fe752218ff05517ecc678329f45e742f51cb7
- SSDEEP 1536:7m1n4CrSuwb273hhEiA+pk8oJGap7tED3NEzBKGNTM9hYXF8d6vL+RQsOrsG:C1n4/IIUS9HF2D3NyKGeEuIfsO4G
- TLSH T13C83F1C3BBAF49A2D905277139EAB3B3462165C14001EB249F36DCE1B4DF279E40DE0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_9024ed82db912c3bdfedaec7782671b5_elex_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_9024ed82db912c3bdfedaec7782671b5_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_9024ed82db912c3bdfedaec7782671b5_elex_wannacry
- Size 80KB
- SHA256 c2948b97e9feea8a0575c371e20df2d0ac076f118f007f1be92ade8646c6ca9d
- MD5 9024ed82db912c3bdfedaec7782671b5
- SHA1 53da34bb14afdc761818270fcedc579f3c3bf30a
- SHA512 7d639f528a941ed0aba6c15fe72b6def3b9ffe54a94a297dcf03e3a524801f806526530025813f466ebe07d1ba5fe752218ff05517ecc678329f45e742f51cb7
- SSDEEP 1536:7m1n4CrSuwb273hhEiA+pk8oJGap7tED3NEzBKGNTM9hYXF8d6vL+RQsOrsG:C1n4/IIUS9HF2D3NyKGeEuIfsO4G
- TLSH T13C83F1C3BBAF49A2D905277139EAB3B3462165C14001EB249F36DCE1B4DF279E40DE0A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory