General
- Target 2026-09-01_6c1b3b4052436c45fc2cc2c5348be15a_elex_wannacry
- Size 64KB
- Sample260903-mccveavbpf
- SHA256 1fec4ed0aaa702eb64346aa9aca632f3d4ac1db6f51cb66ba0a7d24624dfae48
- MD5 6c1b3b4052436c45fc2cc2c5348be15a
- SHA1 463442c595398b4debf1d76b3371c2cfe0c4f2ab
- SHA512 1c507016849d92286dfef2e8cf4500dd6a56572c2f2424f20df8b035c18868fbdc7582a5b86711da0ef6ba81e651eefd25afeb844b1f9d72b501e5a25f6af5a4
- SSDEEP 192:ObOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwWY04/CFxyNhoy5tT:ObLwOs8AHsc4sMfwhKQLroc4/CFsrdT
- TLSH T17253414A269544A3F94EB1B82CE44D7C61AF55C050296B7EE7E0EB272327DE1D42F20F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-01_6c1b3b4052436c45fc2cc2c5348be15a_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-01_6c1b3b4052436c45fc2cc2c5348be15a_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-01_6c1b3b4052436c45fc2cc2c5348be15a_elex_wannacry
- Size 64KB
- SHA256 1fec4ed0aaa702eb64346aa9aca632f3d4ac1db6f51cb66ba0a7d24624dfae48
- MD5 6c1b3b4052436c45fc2cc2c5348be15a
- SHA1 463442c595398b4debf1d76b3371c2cfe0c4f2ab
- SHA512 1c507016849d92286dfef2e8cf4500dd6a56572c2f2424f20df8b035c18868fbdc7582a5b86711da0ef6ba81e651eefd25afeb844b1f9d72b501e5a25f6af5a4
- SSDEEP 192:ObOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwWY04/CFxyNhoy5tT:ObLwOs8AHsc4sMfwhKQLroc4/CFsrdT
- TLSH T17253414A269544A3F94EB1B82CE44D7C61AF55C050296B7EE7E0EB272327DE1D42F20F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE