General
- Target 2026-08-24_871c648df6955a62f4162a56f6bd04c2_elex_wannacry
- Size 670KB
- Sample260825-kfz31ayfrf
- SHA256 118d42a6ef9f2516c3538e970edd5d3d7fdb8a05517ed201ade6b10f80d27406
- MD5 871c648df6955a62f4162a56f6bd04c2
- SHA1 0fdde0b829e594e19c4811b34a4dda1a18f36770
- SHA512 78e7f716983a027554b6863a2df11078face481f533bcb6e3c183db8816630b145ac5d2bf5005802337bc39e8388cf5f5a19fc4df36fd5c0ca96e72edbb0ae93
- SSDEEP 12288:iyGOm158+F7j/jkqcS6LpEXzbUKmJk698zdFqx/HFE9qqOa+QjJ9NDL:iyGOm158+V/jAS6LiCJk6+zmx/HFE9q8
- TLSH T171E4234FBB9521B6C8684834C42FB7B64E346DEA6048FA14A31DF9273DE5360B017D8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_871c648df6955a62f4162a56f6bd04c2_elex_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_871c648df6955a62f4162a56f6bd04c2_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_871c648df6955a62f4162a56f6bd04c2_elex_wannacry
- Size 670KB
- SHA256 118d42a6ef9f2516c3538e970edd5d3d7fdb8a05517ed201ade6b10f80d27406
- MD5 871c648df6955a62f4162a56f6bd04c2
- SHA1 0fdde0b829e594e19c4811b34a4dda1a18f36770
- SHA512 78e7f716983a027554b6863a2df11078face481f533bcb6e3c183db8816630b145ac5d2bf5005802337bc39e8388cf5f5a19fc4df36fd5c0ca96e72edbb0ae93
- SSDEEP 12288:iyGOm158+F7j/jkqcS6LpEXzbUKmJk698zdFqx/HFE9qqOa+QjJ9NDL:iyGOm158+V/jAS6LiCJk6+zmx/HFE9q8
- TLSH T171E4234FBB9521B6C8684834C42FB7B64E346DEA6048FA14A31DF9273DE5360B017D8E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory