General
- Target 2026-09-08_796382a89dd77869d76a484cb3aedc49_elex_wannacry
- Size 20KB
- Sample260908-szdccatcjf
- SHA256 65103dc78d6bfcf1856ef698e3fbf2888cdfca0614953552b0dc5eb154014b11
- MD5 796382a89dd77869d76a484cb3aedc49
- SHA1 3ecec86c16646752ff5e68ac0b84f75ca5c99566
- SHA512 c78f32bc5f7c4774562b94abd68fb08512cd0c744d94934a43e30e5632dc054d77a85d176f49cfc454cca2148b413d266880249fb41559f438d4506c68848424
- SSDEEP 384:uTQWckBeEd6ml1pcg7F3Gih1uTRTF+2Rq2iW6Q:uxckEEd62J7F3Gih1uTRTF+b1WB
- TLSH T1619252395BE41972E3FBD6B685F7C1C6A834B4373A03991E40861B891C23F11EDA1B9D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-08_796382a89dd77869d76a484cb3aedc49_elex_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-08_796382a89dd77869d76a484cb3aedc49_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_796382a89dd77869d76a484cb3aedc49_elex_wannacry
- Size 20KB
- SHA256 65103dc78d6bfcf1856ef698e3fbf2888cdfca0614953552b0dc5eb154014b11
- MD5 796382a89dd77869d76a484cb3aedc49
- SHA1 3ecec86c16646752ff5e68ac0b84f75ca5c99566
- SHA512 c78f32bc5f7c4774562b94abd68fb08512cd0c744d94934a43e30e5632dc054d77a85d176f49cfc454cca2148b413d266880249fb41559f438d4506c68848424
- SSDEEP 384:uTQWckBeEd6ml1pcg7F3Gih1uTRTF+2Rq2iW6Q:uxckEEd62J7F3Gih1uTRTF+b1WB
- TLSH T1619252395BE41972E3FBD6B685F7C1C6A834B4373A03991E40861B891C23F11EDA1B9D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Waski payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE