General
- Target 2026-09-24_4b17caa63cf6c7e0ac6b105ff692dae4_elex_wannacry
- Size 64KB
- Sample260925-mmrfjsvy9l
- SHA256 7804be60ba8489d55a6897fa3bfac201799b45847122e9e2dbe5436e50a39d59
- MD5 4b17caa63cf6c7e0ac6b105ff692dae4
- SHA1 e3f32e93d7da160a6feceab85b08f1c4cf853ed6
- SHA512 5fc129d220877eb99e82c56055a66c5d550cbda120303a738c06204b71eb2ec8ca4fadb29d97d248cfa1c0a6966edef3b6e15b93c0b68efc8084717099d87fe3
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLroi4/CFsrdn0A9lsy4:vvw9816vhKQLroi4/wQH9lsl
- TLSH T19B535C834BEE98F2F7D20131046D8AB99277ADC4961EBEAF7F50CE55007B191D83A14B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-24_4b17caa63cf6c7e0ac6b105ff692dae4_elex_wannacry.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-24_4b17caa63cf6c7e0ac6b105ff692dae4_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-24_4b17caa63cf6c7e0ac6b105ff692dae4_elex_wannacry
- Size 64KB
- SHA256 7804be60ba8489d55a6897fa3bfac201799b45847122e9e2dbe5436e50a39d59
- MD5 4b17caa63cf6c7e0ac6b105ff692dae4
- SHA1 e3f32e93d7da160a6feceab85b08f1c4cf853ed6
- SHA512 5fc129d220877eb99e82c56055a66c5d550cbda120303a738c06204b71eb2ec8ca4fadb29d97d248cfa1c0a6966edef3b6e15b93c0b68efc8084717099d87fe3
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLroi4/CFsrdn0A9lsy4:vvw9816vhKQLroi4/wQH9lsl
- TLSH T19B535C834BEE98F2F7D20131046D8AB99277ADC4961EBEAF7F50CE55007B191D83A14B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE