13c3559fa7f8b8bc57a763b691524b3e7089558b70b3ca02b38180d15956fd8d | Triage™

Login
Reports

Overview

overview

Static

static

3

2026-08-28...ry.exe

windows10-2004-x64

2026-08-28...ry.exe

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-28_7b44ca48671b71fc51aa21e1bc3b706d_elex_wannacry
Size 864KB
Sample260828-q2v9tsam71
SHA256 13c3559fa7f8b8bc57a763b691524b3e7089558b70b3ca02b38180d15956fd8d
MD5 7b44ca48671b71fc51aa21e1bc3b706d
SHA1 82b67de4633ba2131ee74a290f0b7d468ec5bc89
SHA512 c7c0b88797ee465c4f49edbe8cfe19bb40f8879df18b5be1cf2b23a7821b0c3c070e88a240409ca599d0d040beffe7f3323374cc068bfdfcbf91b073ae728ebe
SSDEEP 12288:+rDIHH76jx4v7q5Jmlrlx3E4rIENZpCHykTXBGIU2UtUHkgw/+T9i:eyiMcmlX3EaNjsTXKtEkB+M
TLSH
T1971523A6DCC5F864E01704B12889B3B2EE37F529A102DFE69375CDB3C52A1A9B4DD344
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

defense_evasion discovery persistence

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-08-28_7b44ca48671b71fc51aa21e1bc3b706d_elex_wannacry.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

150 seconds

defense_evasion discovery persistence

Behavioral task

behavioral2

Sample

2026-08-28_7b44ca48671b71fc51aa21e1bc3b706d_elex_wannacry.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

defense_evasion discovery persistence

Malware Config

Targets

- Target
  2026-08-28_7b44ca48671b71fc51aa21e1bc3b706d_elex_wannacry
- Size 864KB
- SHA256 13c3559fa7f8b8bc57a763b691524b3e7089558b70b3ca02b38180d15956fd8d
- MD5 7b44ca48671b71fc51aa21e1bc3b706d
- SHA1 82b67de4633ba2131ee74a290f0b7d468ec5bc89
- SHA512 c7c0b88797ee465c4f49edbe8cfe19bb40f8879df18b5be1cf2b23a7821b0c3c070e88a240409ca599d0d040beffe7f3323374cc068bfdfcbf91b073ae728ebe
- SSDEEP 12288:+rDIHH76jx4v7q5Jmlrlx3E4rIENZpCHykTXBGIU2UtUHkgw/+T9i:eyiMcmlX3EaNjsTXKtEkB+M
- TLSH
  T1971523A6DCC5F864E01704B12889B3B2EE37F529A102DFE69375CDB3C52A1A9B4DD344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery persistence
- Modifies firewall policy service
  defense_evasion
- Adds policy Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistence

behavioral2

defense_evasiondiscoverypersistence

© 2018-2026

Terms | Privacy