General
- Target 2026-09-04_7b33bebcfd29546297bd17d70b93e7b8_elex_wannacry
- Size 64KB
- Sample260905-gqlftavtey
- SHA256 be822cbbc2017c98b2225351c92e3c0c79e48698d979c0a3afbd0dbfb89e0324
- MD5 7b33bebcfd29546297bd17d70b93e7b8
- SHA1 119ba7e99acc726cacb7fc6c204190f260e2168c
- SHA512 1d1af20204c0e65cb48924b62feb376dc7cfd311ad4976a6da293d8e8581f731e5d6f46c5fd03363f989ab715ae2c530e57e7bfa0fac1cc18bdfe53f9f379818
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLroKL4/CFsrdn0A9lsy4:vvw9816vhKQLroKL4/wQH9lsl
- TLSH T13B535C834BEE98F2F7D20131046D8A798277ADC4961EBEAF7F50CE54007B191D83A14B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-04_7b33bebcfd29546297bd17d70b93e7b8_elex_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_7b33bebcfd29546297bd17d70b93e7b8_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_7b33bebcfd29546297bd17d70b93e7b8_elex_wannacry
- Size 64KB
- SHA256 be822cbbc2017c98b2225351c92e3c0c79e48698d979c0a3afbd0dbfb89e0324
- MD5 7b33bebcfd29546297bd17d70b93e7b8
- SHA1 119ba7e99acc726cacb7fc6c204190f260e2168c
- SHA512 1d1af20204c0e65cb48924b62feb376dc7cfd311ad4976a6da293d8e8581f731e5d6f46c5fd03363f989ab715ae2c530e57e7bfa0fac1cc18bdfe53f9f379818
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLroKL4/CFsrdn0A9lsy4:vvw9816vhKQLroKL4/wQH9lsl
- TLSH T13B535C834BEE98F2F7D20131046D8A798277ADC4961EBEAF7F50CE54007B191D83A14B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE