General
- Target 2026-09-26_c28e2406ad9fb74b81ead52869413413_elex_wannacry
- Size 22KB
- Sample260927-n68dvaxbnd
- SHA256 b1a439b878155423e838b4fe4d179e8c78c45f5c4485f08dca417f7bb2d37dff
- MD5 c28e2406ad9fb74b81ead52869413413
- SHA1 de5116003bb736c0134b7664b30216cc544919c2
- SHA512 a9ca9e5c54fbdfff36670d09e27accd834d92fd66f5fec339fcd127ed6605c5eca8cc901bb838467bfb823402821f12447bf1a80617dd819fe424b15c05240d4
- SSDEEP 384:uTQWckBeEd6ml1pcg7F3GiSrI82aGokquJH:uxckEEd62J7F3GihoBuJH
- TLSH T162A252386FD51E72E3BBDBF286F7D2C6A975B02779035A1E80850B451823F119DA0E8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-26_c28e2406ad9fb74b81ead52869413413_elex_wannacry.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-26_c28e2406ad9fb74b81ead52869413413_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-26_c28e2406ad9fb74b81ead52869413413_elex_wannacry
- Size 22KB
- SHA256 b1a439b878155423e838b4fe4d179e8c78c45f5c4485f08dca417f7bb2d37dff
- MD5 c28e2406ad9fb74b81ead52869413413
- SHA1 de5116003bb736c0134b7664b30216cc544919c2
- SHA512 a9ca9e5c54fbdfff36670d09e27accd834d92fd66f5fec339fcd127ed6605c5eca8cc901bb838467bfb823402821f12447bf1a80617dd819fe424b15c05240d4
- SSDEEP 384:uTQWckBeEd6ml1pcg7F3GiSrI82aGokquJH:uxckEEd62J7F3GihoBuJH
- TLSH T162A252386FD51E72E3BBDBF286F7D2C6A975B02779035A1E80850B451823F119DA0E8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Waski payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE