General
- Target 2026-09-03_e8e37f6366795a6d9bf6ce690cfe88cf_elex_wannacry
- Size 63KB
- Sample260903-ykbsvs1wbs
- SHA256 472e56a8c7f1982ccebda31bb9480e3e86e3228fc5545f9435ee1e3218d767bf
- MD5 e8e37f6366795a6d9bf6ce690cfe88cf
- SHA1 0ceb568980874d5a0cb7e286b85c29ce1394bea4
- SHA512 5270e4ce49a0197aeec5e22b7d8ff1eccdde304607ab4f58c76d59f3ca81c9a4d6cfc4f1c0c0d40342f570cd610166a276ccf3deb9250b9ba9f7a3c3b5b60d07
- SSDEEP 768:F/3ed1zZN/zoy0rtsDIilcXe1MFW5ToAPTUVO:FvWbzoZONTJ
- TLSH T1735363786AE81976D7B7CBB6C6F655C3F822B42739129C0D00D317490D23F17ADA2A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-03_e8e37f6366795a6d9bf6ce690cfe88cf_elex_wannacry.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-03_e8e37f6366795a6d9bf6ce690cfe88cf_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-03_e8e37f6366795a6d9bf6ce690cfe88cf_elex_wannacry
- Size 63KB
- SHA256 472e56a8c7f1982ccebda31bb9480e3e86e3228fc5545f9435ee1e3218d767bf
- MD5 e8e37f6366795a6d9bf6ce690cfe88cf
- SHA1 0ceb568980874d5a0cb7e286b85c29ce1394bea4
- SHA512 5270e4ce49a0197aeec5e22b7d8ff1eccdde304607ab4f58c76d59f3ca81c9a4d6cfc4f1c0c0d40342f570cd610166a276ccf3deb9250b9ba9f7a3c3b5b60d07
- SSDEEP 768:F/3ed1zZN/zoy0rtsDIilcXe1MFW5ToAPTUVO:FvWbzoZONTJ
- TLSH T1735363786AE81976D7B7CBB6C6F655C3F822B42739129C0D00D317490D23F17ADA2A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE