General
- Target 2026-09-24_bf7d9d719c65b1401775d9503e284636_elex_wannacry
- Size 64KB
- Sample260924-31hcssztev
- SHA256 bd9882e7915f416c6eecc1f98e0ffd668ef0bf9df53fc0165950044000f70fa3
- MD5 bf7d9d719c65b1401775d9503e284636
- SHA1 1a38f211e5b200a2a761859bb271764099309bf5
- SHA512 23e5b4cc4c87824fb149cec55c8dd5a100c081f65c90c7adc2930d1d5cedecc3d40a658f9c83675037175eb8c27b44ea60878a7a3f44fd07dcce6dc120384e6e
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLroD4/CFsrdn0A9lsy4:vvw9816vhKQLroD4/wQH9lsl
- TLSH T10C535C834BEE98F2F7D20131046D8AB98277ADC4961EBEAF7F50CE54007B191D83A14B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-24_bf7d9d719c65b1401775d9503e284636_elex_wannacry.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-24_bf7d9d719c65b1401775d9503e284636_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-24_bf7d9d719c65b1401775d9503e284636_elex_wannacry
- Size 64KB
- SHA256 bd9882e7915f416c6eecc1f98e0ffd668ef0bf9df53fc0165950044000f70fa3
- MD5 bf7d9d719c65b1401775d9503e284636
- SHA1 1a38f211e5b200a2a761859bb271764099309bf5
- SHA512 23e5b4cc4c87824fb149cec55c8dd5a100c081f65c90c7adc2930d1d5cedecc3d40a658f9c83675037175eb8c27b44ea60878a7a3f44fd07dcce6dc120384e6e
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLroD4/CFsrdn0A9lsy4:vvw9816vhKQLroD4/wQH9lsl
- TLSH T10C535C834BEE98F2F7D20131046D8AB98277ADC4961EBEAF7F50CE54007B191D83A14B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE