General
- Target 2026-08-24_40ad380783d3adf1c77b0e02387019b5_elex_wannacry
- Size 112KB
- Sample260825-r4tdpatemb
- SHA256 829656f8f4c377eec6dda69187e93d322addf66f9769f11e08ec011550c83556
- MD5 40ad380783d3adf1c77b0e02387019b5
- SHA1 46ca84b535aa6145d108b531645e8a78d250da17
- SHA512 91cc45f599c357bfe7f2d666fd8be1e79a4c70d179bc19a3ff92cb966214caa01716c4aea1a777db353bd18cc691524c19063b5778465be3b1c0bd50ce0140d1
- SSDEEP 3072:styPzouIS9HF2D3NUyfrVC1j5kE+tAvFz18+:5pISFULyFmAvFp7
- TLSH T135B302833E9A02F2CD883134100B33774B34B6975243E694972AEC7459EB47AEC4EE5D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_40ad380783d3adf1c77b0e02387019b5_elex_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_40ad380783d3adf1c77b0e02387019b5_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_40ad380783d3adf1c77b0e02387019b5_elex_wannacry
- Size 112KB
- SHA256 829656f8f4c377eec6dda69187e93d322addf66f9769f11e08ec011550c83556
- MD5 40ad380783d3adf1c77b0e02387019b5
- SHA1 46ca84b535aa6145d108b531645e8a78d250da17
- SHA512 91cc45f599c357bfe7f2d666fd8be1e79a4c70d179bc19a3ff92cb966214caa01716c4aea1a777db353bd18cc691524c19063b5778465be3b1c0bd50ce0140d1
- SSDEEP 3072:styPzouIS9HF2D3NUyfrVC1j5kE+tAvFz18+:5pISFULyFmAvFp7
- TLSH T135B302833E9A02F2CD883134100B33774B34B6975243E694972AEC7459EB47AEC4EE5D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory