General
- Target 2026-08-28_4528b4bf9555b0d57b3cd8da4f40d815_elex_wannacry
- Size 84KB
- Sample260828-v9aejs1fkb
- SHA256 170ed5079b2760c198e405083eb1f53f2be88c0e2240cb481bac52595115f6e0
- MD5 4528b4bf9555b0d57b3cd8da4f40d815
- SHA1 59d60b8ebfb1ec1a9a8fe18c89cfec75d611744e
- SHA512 aadf781bbbf8813984ce08c2c0f4659d682ced88d233d18146b7ad422d91ffee6d90c9734b2dc85146b1d284c3e65d0bcb99d4cf34b8857dca81b0e6fad38ab0
- SSDEEP 768:svw9816vhKQLro+4/wQWdYiJdYrJhdYrJosTX0udYrJosTVsTev:MEGh0o+llZCJvCJXX0SCJXuev
- TLSH T1DB831A5372DC5CF3F1A623382977AF674D42BB90050A3B525AC08A8F499C9D7DA2C35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-28_4528b4bf9555b0d57b3cd8da4f40d815_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-28_4528b4bf9555b0d57b3cd8da4f40d815_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-28_4528b4bf9555b0d57b3cd8da4f40d815_elex_wannacry
- Size 84KB
- SHA256 170ed5079b2760c198e405083eb1f53f2be88c0e2240cb481bac52595115f6e0
- MD5 4528b4bf9555b0d57b3cd8da4f40d815
- SHA1 59d60b8ebfb1ec1a9a8fe18c89cfec75d611744e
- SHA512 aadf781bbbf8813984ce08c2c0f4659d682ced88d233d18146b7ad422d91ffee6d90c9734b2dc85146b1d284c3e65d0bcb99d4cf34b8857dca81b0e6fad38ab0
- SSDEEP 768:svw9816vhKQLro+4/wQWdYiJdYrJhdYrJosTX0udYrJosTVsTev:MEGh0o+llZCJvCJXX0SCJXuev
- TLSH T1DB831A5372DC5CF3F1A623382977AF674D42BB90050A3B525AC08A8F499C9D7DA2C35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE