General
- Target 2026-09-13_0cedb549b165f43c4820a328dc421567_elex_wannacry
- Size 11.2MB
- Sample260913-wlkfaatvds
- SHA256 adc6201e102c87be3ca7c6255b0b44c873dcadbfd9dc978090120543b7c3fcda
- MD5 0cedb549b165f43c4820a328dc421567
- SHA1 7a19a02e28f2fbd7419be393705946d4abdcaa3f
- SHA512 49ae1885d21e821b5fa58f543a6b41b783e811e500dc92aaf1609b5224eaa58642829cb1fa51149b5296bfcbcfaf0879a1714c459eb7f2a7f04538c812b91809
- SSDEEP 196608:Y5aFp4awcR5f0ieaw+ulzkCLDmWCwcTXAqoud3T9XniZvwQAc2l5wT3/Q1HS:Y5aPBRF0iVulz7LCWCw+Apud3T9XUAno
- TLSH T123C63383CD401929CC6716B180758C9207AFBD358BE656DBA6EB76133E6B8C3647F243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-13_0cedb549b165f43c4820a328dc421567_elex_wannacry.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-13_0cedb549b165f43c4820a328dc421567_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-13_0cedb549b165f43c4820a328dc421567_elex_wannacry
- Size 11.2MB
- SHA256 adc6201e102c87be3ca7c6255b0b44c873dcadbfd9dc978090120543b7c3fcda
- MD5 0cedb549b165f43c4820a328dc421567
- SHA1 7a19a02e28f2fbd7419be393705946d4abdcaa3f
- SHA512 49ae1885d21e821b5fa58f543a6b41b783e811e500dc92aaf1609b5224eaa58642829cb1fa51149b5296bfcbcfaf0879a1714c459eb7f2a7f04538c812b91809
- SSDEEP 196608:Y5aFp4awcR5f0ieaw+ulzkCLDmWCwcTXAqoud3T9XniZvwQAc2l5wT3/Q1HS:Y5aPBRF0iVulz7LCWCw+Apud3T9XUAno
- TLSH T123C63383CD401929CC6716B180758C9207AFBD358BE656DBA6EB76133E6B8C3647F243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Detects executables referencing many email and collaboration clients. Observed in information steale
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Creates new service(s)
-
Executes dropped EXE
-
Loads dropped DLL