General
- Target 2026-09-17_cf2a2da23d5e34e57c5457ba406cc437_elex_wannacry
- Size 16KB
- Sample260917-mvbeasywdv
- SHA256 276662a485ef67d60a63916f7518a8b3a80c9683279e14c88affd1aaec863786
- MD5 cf2a2da23d5e34e57c5457ba406cc437
- SHA1 90a7c47f9be1a9e0327ca12c7780feda6bcc3176
- SHA512 9b60b02d17990ad56123f4f8f906c051890722e1eaec02038079d4767e78b139aed9e39c49a1f25991a7b46a56e6a834a4e00c19aea3245f6e5dbe86205db5f2
- SSDEEP 192:uTk5WckBezHYQRPK6k7TjHwCl1oynzc2Fjmf2mrETLLC0qmtBUPN2Rp8JicBVyDM:uTQWckBeEd6ml1pcg79UP4EJPkb4Dx
- TLSH T1DE7296355BE41D73E3FBC7F595FBC1D6A834B42B3B03592E54891B882823A11EC607A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-17_cf2a2da23d5e34e57c5457ba406cc437_elex_wannacry.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-17_cf2a2da23d5e34e57c5457ba406cc437_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-17_cf2a2da23d5e34e57c5457ba406cc437_elex_wannacry
- Size 16KB
- SHA256 276662a485ef67d60a63916f7518a8b3a80c9683279e14c88affd1aaec863786
- MD5 cf2a2da23d5e34e57c5457ba406cc437
- SHA1 90a7c47f9be1a9e0327ca12c7780feda6bcc3176
- SHA512 9b60b02d17990ad56123f4f8f906c051890722e1eaec02038079d4767e78b139aed9e39c49a1f25991a7b46a56e6a834a4e00c19aea3245f6e5dbe86205db5f2
- SSDEEP 192:uTk5WckBezHYQRPK6k7TjHwCl1oynzc2Fjmf2mrETLLC0qmtBUPN2Rp8JicBVyDM:uTQWckBeEd6ml1pcg79UP4EJPkb4Dx
- TLSH T1DE7296355BE41D73E3FBC7F595FBC1D6A834B42B3B03592E54891B882823A11EC607A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Waski payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE