General
- Target 2026-09-07_c3bfc0e24f2c104d7fa3aff48280b3da_elex_wannacry
- Size 19KB
- Sample260908-g834kstbqa
- SHA256 8ab9fb0c0ecfa0498fe208039cbdcdf72cd5dea333f6bf860a6cb006ce920bee
- MD5 c3bfc0e24f2c104d7fa3aff48280b3da
- SHA1 aa810e9f3f96695dc06cdbe2c477f554def9f675
- SHA512 9e9e397415d4dc93f771ac07f1e0fb325cc3f7a0a031552b61dbc6084f8b86308ad2034fbfa59f3c5394dc536f7656770b462549c93ae927e36ca85eac0e802c
- SSDEEP 384:vLoUqhdO7+eN6GWl1pcG4rAAAAAHZMHBfTwEoP//lMnBY0Vm3ds:vLoZWN6GGBZ2BbwEoP/NsBY0Vmi
- TLSH T1D29261384FC24AB6F3B3CAB285F797D6AA31B5A3F4130A0DD58507058823752ED85DAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-07_c3bfc0e24f2c104d7fa3aff48280b3da_elex_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-07_c3bfc0e24f2c104d7fa3aff48280b3da_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-07_c3bfc0e24f2c104d7fa3aff48280b3da_elex_wannacry
- Size 19KB
- SHA256 8ab9fb0c0ecfa0498fe208039cbdcdf72cd5dea333f6bf860a6cb006ce920bee
- MD5 c3bfc0e24f2c104d7fa3aff48280b3da
- SHA1 aa810e9f3f96695dc06cdbe2c477f554def9f675
- SHA512 9e9e397415d4dc93f771ac07f1e0fb325cc3f7a0a031552b61dbc6084f8b86308ad2034fbfa59f3c5394dc536f7656770b462549c93ae927e36ca85eac0e802c
- SSDEEP 384:vLoUqhdO7+eN6GWl1pcG4rAAAAAHZMHBfTwEoP//lMnBY0Vm3ds:vLoZWN6GGBZ2BbwEoP/NsBY0Vmi
- TLSH T1D29261384FC24AB6F3B3CAB285F797D6AA31B5A3F4130A0DD58507058823752ED85DAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Waski payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE