General
- Target 2026-09-17_a3d2b73cb09429a1c5a8937626aff400_elex_wannacry
- Size 16KB
- Sample260917-nkqa5sda62
- SHA256 38e60de695c93fc85b2f21551a7c393cdf79bfa08f9d492e13a05f8e345a3926
- MD5 a3d2b73cb09429a1c5a8937626aff400
- SHA1 dea641b7a3d36254d2711569db9254165fcea480
- SHA512 75ec1abb84fd100af59df24b72272e460ffe5f765fe07969ad1b1aa5b81a3d15a3a9a6b80ee92949b6d4e17a32035e8c3c804c3e59fb62ed0e2ee8cf920f7837
- SSDEEP 192:uTk5WckBezHYQRPK6k7TjHwCl1oynzc2Fjmf2mrETLLC0qmtBUPN2Rp8JicBVyDG:uTQWckBeEd6ml1pcg79UP4EJPkb4DX
- TLSH T1DE7296355BE41D73E3FBC7B595FBC1D6A834B42B3B03592E54891B882823A11EC607A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-17_a3d2b73cb09429a1c5a8937626aff400_elex_wannacry.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-17_a3d2b73cb09429a1c5a8937626aff400_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-17_a3d2b73cb09429a1c5a8937626aff400_elex_wannacry
- Size 16KB
- SHA256 38e60de695c93fc85b2f21551a7c393cdf79bfa08f9d492e13a05f8e345a3926
- MD5 a3d2b73cb09429a1c5a8937626aff400
- SHA1 dea641b7a3d36254d2711569db9254165fcea480
- SHA512 75ec1abb84fd100af59df24b72272e460ffe5f765fe07969ad1b1aa5b81a3d15a3a9a6b80ee92949b6d4e17a32035e8c3c804c3e59fb62ed0e2ee8cf920f7837
- SSDEEP 192:uTk5WckBezHYQRPK6k7TjHwCl1oynzc2Fjmf2mrETLLC0qmtBUPN2Rp8JicBVyDG:uTQWckBeEd6ml1pcg79UP4EJPkb4DX
- TLSH T1DE7296355BE41D73E3FBC7B595FBC1D6A834B42B3B03592E54891B882823A11EC607A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Waski payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE