General
- Target 2026-09-17_746dc7a9a8dfa17291ec4ef2e29207b2_elex_wannacry
- Size 16KB
- Sample260917-pe5z3sty7p
- SHA256 5075427f4bb3729a8cc548770075f5c53007afd59b71d91d7569f2f5bcacdc17
- MD5 746dc7a9a8dfa17291ec4ef2e29207b2
- SHA1 325fe0303dd746947f1fbd74bc97390f88591792
- SHA512 b418f7041abc1994051f4f600742a379a9ba4693606ecbf3712a543bd7c2b06b360a6407cde38054616c975141c3d6ac33ff9ed483d7e8f402e47a9f6791bd5b
- SSDEEP 192:uTk5WckBezHYQRPK6k7TjHwCl1oynzc2Fjmf2mrETLLC0qmtBUPN2Rp8JicBVyDb:uTQWckBeEd6ml1pcg79UP4EJPkb4DS
- TLSH T12F7297355BE41D73E3FBC7F595FBC1D6A834742B3B03592E54891B882823A11DC607A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-17_746dc7a9a8dfa17291ec4ef2e29207b2_elex_wannacry.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-17_746dc7a9a8dfa17291ec4ef2e29207b2_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-17_746dc7a9a8dfa17291ec4ef2e29207b2_elex_wannacry
- Size 16KB
- SHA256 5075427f4bb3729a8cc548770075f5c53007afd59b71d91d7569f2f5bcacdc17
- MD5 746dc7a9a8dfa17291ec4ef2e29207b2
- SHA1 325fe0303dd746947f1fbd74bc97390f88591792
- SHA512 b418f7041abc1994051f4f600742a379a9ba4693606ecbf3712a543bd7c2b06b360a6407cde38054616c975141c3d6ac33ff9ed483d7e8f402e47a9f6791bd5b
- SSDEEP 192:uTk5WckBezHYQRPK6k7TjHwCl1oynzc2Fjmf2mrETLLC0qmtBUPN2Rp8JicBVyDb:uTQWckBeEd6ml1pcg79UP4EJPkb4DS
- TLSH T12F7297355BE41D73E3FBC7F595FBC1D6A834742B3B03592E54891B882823A11DC607A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Waski payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE