General
- Target 2026-09-07_4daafc9fbc01b9859c7ddd9ffce9092e_elex_wannacry
- Size 588KB
- Sample260909-cey6bazhmf
- SHA256 ab6a353b01a4097f2a6f4b077fa6d190060809850775c3e0344e8fda39d56cf8
- MD5 4daafc9fbc01b9859c7ddd9ffce9092e
- SHA1 db7c9997cb260f68c9d07b319ea8555dcc224e18
- SHA512 89e1755a538d30e3c3bd4c69d2504c65fe558561de35a3adea339da5db4f5b8e2cf9d0cfb588808187391abe996320337f37d1ca1db5de34efe605460dec5eba
- SSDEEP 6144:dxEqOEYeH0rXcNdKSx4xoxsxe69xPxs9Iji:X6FXOs8QnJY
- TLSH T121D431DEB9D64596E093DBB0236F91B0D4376CB68B405AA7D34BEC5311ACD5C20CB2E2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-07_4daafc9fbc01b9859c7ddd9ffce9092e_elex_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-07_4daafc9fbc01b9859c7ddd9ffce9092e_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-07_4daafc9fbc01b9859c7ddd9ffce9092e_elex_wannacry
- Size 588KB
- SHA256 ab6a353b01a4097f2a6f4b077fa6d190060809850775c3e0344e8fda39d56cf8
- MD5 4daafc9fbc01b9859c7ddd9ffce9092e
- SHA1 db7c9997cb260f68c9d07b319ea8555dcc224e18
- SHA512 89e1755a538d30e3c3bd4c69d2504c65fe558561de35a3adea339da5db4f5b8e2cf9d0cfb588808187391abe996320337f37d1ca1db5de34efe605460dec5eba
- SSDEEP 6144:dxEqOEYeH0rXcNdKSx4xoxsxe69xPxs9Iji:X6FXOs8QnJY
- TLSH T121D431DEB9D64596E093DBB0236F91B0D4376CB68B405AA7D34BEC5311ACD5C20CB2E2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory