General
- Target 2026-08-27_fb657e74f68e8df23b362c4aafeb335a_elex_wannacry
- Size 18KB
- Sample260828-ar7l4sbd82
- SHA256 6af8594be676aff907d6f15e5156e77e3f2196ef3c136e340dacf6bd6b6d8efa
- MD5 fb657e74f68e8df23b362c4aafeb335a
- SHA1 8a09152adc652d0fa58f75e43125f52124735446
- SHA512 70d537a5091fd50e4fe7c2d48784b3079a9192a5271352de816e5d47480fd2046613d59992b59c7a1177e8cec87563ca47a9be2a7caec04fc40c00462097f1ba
- SSDEEP 384:uTQWckBeEd6ml1pcg79UP4EJzZsxPXgag:uxckEEd62J798j9ZiPXvg
- TLSH T1CB8272395AD41C73E3BBC7B5C5F7C1C6B871B42B3A035D2E54861B892C23B12ACA169D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-27_fb657e74f68e8df23b362c4aafeb335a_elex_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-27_fb657e74f68e8df23b362c4aafeb335a_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_fb657e74f68e8df23b362c4aafeb335a_elex_wannacry
- Size 18KB
- SHA256 6af8594be676aff907d6f15e5156e77e3f2196ef3c136e340dacf6bd6b6d8efa
- MD5 fb657e74f68e8df23b362c4aafeb335a
- SHA1 8a09152adc652d0fa58f75e43125f52124735446
- SHA512 70d537a5091fd50e4fe7c2d48784b3079a9192a5271352de816e5d47480fd2046613d59992b59c7a1177e8cec87563ca47a9be2a7caec04fc40c00462097f1ba
- SSDEEP 384:uTQWckBeEd6ml1pcg79UP4EJzZsxPXgag:uxckEEd62J798j9ZiPXvg
- TLSH T1CB8272395AD41C73E3BBC7B5C5F7C1C6B871B42B3A035D2E54861B892C23B12ACA169D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Waski payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE