2026-09-08_fd629e055fa488fe42cf63a7c660e705_elex_phorpiex_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-08_fd629e055fa488fe42cf63a7c660e705_elex_phorpiex_wannacry
Size 89KB
Sample260910-bqzesacl7s
SHA256 1804e86df19cdb6c68a865dbf927219ac2e3a1729735047bbb564054d8b49785
MD5 fd629e055fa488fe42cf63a7c660e705
SHA1 7cf6fef0b2a38f76a12788c5b67bba8c775c28e6
SHA512 38b602ca7d2433c9c26d5ec61d043079dc918b4fb615f7b3c94379a8772344b80674bc64a6240379ec367f3e289c145d48c604be56f1d20df2b1e438e9002ed6
SSDEEP 768:eN/D7hx3KknFZvppDOS8iYgq+lR6ZDU+y13R4w57S2:ahx6kGwYQ6MR4w5N
TLSH
T1EE93E913EA6840FAD8A0083941600F7B9EDBF87E57585493EBF0A591D43C9F193B961F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-08_fd629e055fa488fe42cf63a7c660e705_elex_phorpiex_wannacry

File Explorer

2026-09-08_fd629e055fa488fe42cf63a7c660e705_elex_phorpiex_wannacry

.exe .vbs 89KB

2026-09-08_fd629e055fa488fe42cf63a7c660e705_elex_phorpiex_wannacry

IMPHASH dc7e5173c81f2e649f0af24f2f5c2eb2
SHA256 1804e86df19cdb6c68a865dbf927219ac2e3a1729735047bbb564054d8b49785
MD5 fd629e055fa488fe42cf63a7c660e705
SHA1 7cf6fef0b2a38f76a12788c5b67bba8c775c28e6
SHA512 38b602ca7d2433c9c26d5ec61d043079dc918b4fb615f7b3c94379a8772344b80674bc64a6240379ec367f3e289c145d48c604be56f1d20df2b1e438e9002ed6
SSDEEP 768:eN/D7hx3KknFZvppDOS8iYgq+lR6ZDU+y13R4w57S2:ahx6kGwYQ6MR4w5N
TLSH
T1EE93E913EA6840FAD8A0083941600F7B9EDBF87E57585493EBF0A591D43C9F193B961F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86 polyglot

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

23344

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Cofhaoeifhoae foaoehfuaefhoaehuoaefhou aehfae ueh euheb

msvcrt

_controlfp _except_handler3 __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln strlen exit _XcptFilter _exit strtok strchr strncmp memmove strncpy _snprintf malloc strcat fopen strcpy fprintf fclose fseek ftell strcmp srand sprintf rand isalpha isdigit memcpy strstr memset

ws2_32

select recv send WSAStartup inet_addr htons socket connect WSACleanup closesocket gethostbyname

wininet

InternetCloseHandle InternetOpenA InternetOpenUrlA InternetReadFile

urlmon

URLDownloadToFileA

shlwapi

PathFindFileNameA PathFileExistsA

kernel32

GlobalFree SetCurrentDirectoryA GetFullPathNameA GetModuleFileNameA GetLogicalDriveStringsA GetDriveTypeA SetErrorMode GetVolumeInformationA SetFileAttributesA CreateDirectoryA CopyFileA FindFirstFileA GetFileAttributesA FindNextFileA FindClose MultiByteToWideChar GetTickCount UnmapViewOfFile WriteFile DeleteFileA ExitProcess Sleep ExitThread GlobalLock GlobalUnlock CreateFileA DeviceIoControl CloseHandle SetFilePointer GetFileSize CreateProcessA Process32Next Process32First CreateToolhelp32Snapshot GetLastError ExpandEnvironmentStringsA lstrlenA MapViewOfFile GetTempPathA GlobalAlloc GetStartupInfoA GetModuleHandleA GetSystemTime ReadFile CreateMutexA CreateThread WaitForSingleObject GetLocaleInfoA CreateFileMappingA

user32

CharLowerA wsprintfA GetClipboardData OpenClipboard EmptyClipboard SetClipboardData CloseClipboard CharLowerBuffA

advapi32

RegCloseKey RegOpenKeyExA RegSetValueExA

shell32

SHGetFolderPathA ord680 ShellExecuteA

ole32

CoInitialize CoCreateInstance CoUninitialize

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-08_fd629e055fa488fe42cf63a7c660e705_elex_phorpiex_wannacry

msvcrt

ws2_32

wininet

urlmon

shlwapi

kernel32

user32

advapi32

shell32

ole32

generic