General
- Target 2026-09-24_291e6f8167e51710861d61c8332328c6_elex_wannacry
- Size 168KB
- Sample260924-eqw67sdf97
- SHA256 4e36571acf449f286a6b286a01499b9145b7b120246be7d2ea93122c02f03811
- MD5 291e6f8167e51710861d61c8332328c6
- SHA1 d4dffb239ee6f102166fb49b8735e9e30cab8b94
- SHA512 5fadc770142f22e341ec1148acb5516ca761a9cb62a1a5934907c591b89b07a421fba55a7536f4facd3026f0eac251b8a7c480c513a932d4a40066adae74c39e
- SSDEEP 192:pbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwB374/CFxyNhoy5t:pbLwOs8AHsc4sMfwhKQLrot74/CFsrd
- TLSH T198F318831BDE58F3F791113008798AB9927B9AD4960EBEDF7B90CD250077291D43A50B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-24_291e6f8167e51710861d61c8332328c6_elex_wannacry.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-24_291e6f8167e51710861d61c8332328c6_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-24_291e6f8167e51710861d61c8332328c6_elex_wannacry
- Size 168KB
- SHA256 4e36571acf449f286a6b286a01499b9145b7b120246be7d2ea93122c02f03811
- MD5 291e6f8167e51710861d61c8332328c6
- SHA1 d4dffb239ee6f102166fb49b8735e9e30cab8b94
- SHA512 5fadc770142f22e341ec1148acb5516ca761a9cb62a1a5934907c591b89b07a421fba55a7536f4facd3026f0eac251b8a7c480c513a932d4a40066adae74c39e
- SSDEEP 192:pbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwB374/CFxyNhoy5t:pbLwOs8AHsc4sMfwhKQLrot74/CFsrd
- TLSH T198F318831BDE58F3F791113008798AB9927B9AD4960EBEDF7B90CD250077291D43A50B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE