General
- Target 2026-09-03_fc505128669666a921d8347f96907650_elex_wannacry
- Size 80KB
- Sample260903-wmprdssgkd
- SHA256 d0c169be17daf7b6c22dd127960f05f54f13e7753bc48e9c312b97351aa2d2e2
- MD5 fc505128669666a921d8347f96907650
- SHA1 c65b799384e88db678ff807994d1e14816c0a317
- SHA512 5dd732d1778001adb36026d447973897edb85ff21f9a09bbaef80e9a2ef057eb7c8b9929d5df44b11765062d08d4ae696b05d0e89a9eda7bf38746c73265841d
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLroW4/CFsrdOI1Nb7g7FX7XYfruVDtM9tQ/FKlnVwUUOV:vvw9816vhKQLroW4/wQRNrfrunMxVFAi
- TLSH T19383C43E5DDA1037E173D6B585F12AE7FE66B98339091D0E46D243528D23B43AC86C1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-03_fc505128669666a921d8347f96907650_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-03_fc505128669666a921d8347f96907650_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-03_fc505128669666a921d8347f96907650_elex_wannacry
- Size 80KB
- SHA256 d0c169be17daf7b6c22dd127960f05f54f13e7753bc48e9c312b97351aa2d2e2
- MD5 fc505128669666a921d8347f96907650
- SHA1 c65b799384e88db678ff807994d1e14816c0a317
- SHA512 5dd732d1778001adb36026d447973897edb85ff21f9a09bbaef80e9a2ef057eb7c8b9929d5df44b11765062d08d4ae696b05d0e89a9eda7bf38746c73265841d
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLroW4/CFsrdOI1Nb7g7FX7XYfruVDtM9tQ/FKlnVwUUOV:vvw9816vhKQLroW4/wQRNrfrunMxVFAi
- TLSH T19383C43E5DDA1037E173D6B585F12AE7FE66B98339091D0E46D243528D23B43AC86C1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE