General
- Target 2026-08-27_ee4b6f2fc23b0f7c939150635d75bfba_elex_phorpiex_wannacry
- Size 21KB
- Sample260828-c16ghssflf
- SHA256 1d0923218be038b1d2f6609a2a70b9d2f2c069b95c546c441e509164313d1dc4
- MD5 ee4b6f2fc23b0f7c939150635d75bfba
- SHA1 87a66fd73558439ed324eaf0c4f4a8a2d2f1a993
- SHA512 266f03c6cf6027517162344a33239b72981564cca3d21f090e387cbc558ab19c384d1240166a0a557bb115c1d940913ac01d1f30e6a7170ecc81924faf23f721
- SSDEEP 384:YRwagaEc9/HF6rQ4kAOcvSj3OxWDWh1KWDZhTd10UDmBvryphf7:61gqPqAcaj0Wyhlb0UqBe/7
- TLSH T1D5A24B8CBB9C1325FA568C3039F957B986FA7F7634D4C84EEB604C452234682F424B0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-08-27_ee4b6f2fc23b0f7c939150635d75bfba_elex_phorpiex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-27_ee4b6f2fc23b0f7c939150635d75bfba_elex_phorpiex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_ee4b6f2fc23b0f7c939150635d75bfba_elex_phorpiex_wannacry
- Size 21KB
- SHA256 1d0923218be038b1d2f6609a2a70b9d2f2c069b95c546c441e509164313d1dc4
- MD5 ee4b6f2fc23b0f7c939150635d75bfba
- SHA1 87a66fd73558439ed324eaf0c4f4a8a2d2f1a993
- SHA512 266f03c6cf6027517162344a33239b72981564cca3d21f090e387cbc558ab19c384d1240166a0a557bb115c1d940913ac01d1f30e6a7170ecc81924faf23f721
- SSDEEP 384:YRwagaEc9/HF6rQ4kAOcvSj3OxWDWh1KWDZhTd10UDmBvryphf7:61gqPqAcaj0Wyhlb0UqBe/7
- TLSH T1D5A24B8CBB9C1325FA568C3039F957B986FA7F7634D4C84EEB604C452234682F424B0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Detects binaries and memory artifacts referencing sandbox DLLs typically observed in sandbox evasion
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Adds Run key to start application