General
- Target 2026-09-24_1aa116a697e1550a9607ae225e5c8069_elex_wannacry
- Size 64KB
- Sample260925-rexd2stwf1
- SHA256 478ffb4cd0fc31ada2cecb3ff4cd79bcc1afd286fbc91cfdfe8a00fab72759f5
- MD5 1aa116a697e1550a9607ae225e5c8069
- SHA1 223c004f86ba772bf24d7a106f82df14c314a2d2
- SHA512 9e37c0fd80eb1add04e66f11b2e314382587f6f736e637c9a7684bf64bc31d17a763866b2a6bbdc899cf98f1878083f897a7d2dd2eb4d6e1008c44f372e66f1e
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLrof4/CFsrdn0A9lsy4:vvw9816vhKQLrof4/wQH9lsl
- TLSH T130535C834BEE9CF2F7920131046D8AB98277ADC4961EBEAF7F50CE55007B191D83A14B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-24_1aa116a697e1550a9607ae225e5c8069_elex_wannacry.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-24_1aa116a697e1550a9607ae225e5c8069_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-24_1aa116a697e1550a9607ae225e5c8069_elex_wannacry
- Size 64KB
- SHA256 478ffb4cd0fc31ada2cecb3ff4cd79bcc1afd286fbc91cfdfe8a00fab72759f5
- MD5 1aa116a697e1550a9607ae225e5c8069
- SHA1 223c004f86ba772bf24d7a106f82df14c314a2d2
- SHA512 9e37c0fd80eb1add04e66f11b2e314382587f6f736e637c9a7684bf64bc31d17a763866b2a6bbdc899cf98f1878083f897a7d2dd2eb4d6e1008c44f372e66f1e
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLrof4/CFsrdn0A9lsy4:vvw9816vhKQLrof4/wQH9lsl
- TLSH T130535C834BEE9CF2F7920131046D8AB98277ADC4961EBEAF7F50CE55007B191D83A14B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE