2026-09-28_696a1902ef577464218c0c9ec7f8adde_amadey_elex_floxif_wannacry

General

Target
2026-09-28_696a1902ef577464218c0c9ec7f8adde_amadey_elex_floxif_wannacry
Size 1.6MB
Sample260929-hxp81stelf
SHA256 45ec0cb672b3b1fe277d521c68c1f2da637429856ce04e71310988b4457eac17
MD5 696a1902ef577464218c0c9ec7f8adde
SHA1 453b2d9a5fc7891cfd731222adf9655295587057
SHA512 bee0968ef0a4543f68b1e58fe89a41947532dc0c4707844f3831103cf163d278f23e9fa8fe20e73e47b46bf29d3cb66b3ad7024fd2befa1c550e9b3b6b0eec1a
SSDEEP 49152:guF3Wh8esAMmyyImtH97VTjrtlEfmSX48:g4Wh8JAV/VH97F3tlQ+8
TLSH
T1007533883B02CBEDF9C31530B504A862DCFA6D7D8D9E568FC7556A48BB7D5236A0070B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-28_696a1902ef577464218c0c9ec7f8adde_amadey_elex_floxif_wannacry

File Explorer

2026-09-28_696a1902ef577464218c0c9ec7f8adde_amadey_elex_floxif_wannacry

.exe 1.6MB

2026-09-28_696a1902ef577464218c0c9ec7f8adde_amadey_elex_floxif_wannacry

IMPHASH cf0d2de4fd6406302012e0f40060395f
SHA256 45ec0cb672b3b1fe277d521c68c1f2da637429856ce04e71310988b4457eac17
MD5 696a1902ef577464218c0c9ec7f8adde
SHA1 453b2d9a5fc7891cfd731222adf9655295587057
SHA512 bee0968ef0a4543f68b1e58fe89a41947532dc0c4707844f3831103cf163d278f23e9fa8fe20e73e47b46bf29d3cb66b3ad7024fd2befa1c550e9b3b6b0eec1a
SSDEEP 49152:guF3Wh8esAMmyyImtH97VTjrtlEfmSX48:g4Wh8JAV/VH97F3tlQ+8
TLSH
T1007533883B02CBEDF9C31530B504A862DCFA6D7D8D9E568FC7556A48BB7D5236A0070B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

29588

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

ole32

CoCreateInstance CoInitialize

user32

PeekMessageW ExitWindowsEx GetDlgItemTextW SetWindowTextW ShowWindow MessageBoxW CreateDialogParamW LoadIconW SendMessageW GetMessageW EnableWindow GetDlgItem IsDialogMessageW TranslateMessage DispatchMessageW SetDlgItemTextW DestroyWindow

advapi32

RegSetValueExW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegQueryValueExW RegOpenKeyExW RegCloseKey RegCreateKeyExW

shell32

SHGetFolderPathW SHBrowseForFolderW SHGetPathFromIDListW

msvcrt

_exit _XcptFilter _acmdln __getmainargs _initterm __setusermatherr _adjust_fdiv __p__commode __p__fmode __set_app_type _except_handler3 _controlfp memcpy memcmp memmove malloc free exit memset

kernel32

ReadFile CloseHandle CreateFileW FormatMessageW WriteFile DeleteFileW CreateDirectoryW GetSystemDirectoryW LoadLibraryW GetModuleFileNameW GetFileAttributesW SetFilePointer GetVersion LoadLibraryExW GetModuleHandleA GetStartupInfoA LocalFree SetFileAttributesW SetFileTime MoveFileExW GetLastError lstrcatW GetCommandLineW lstrcpyW GetModuleHandleW GetProcAddress GetCurrentProcess lstrlenW

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-28_696a1902ef577464218c0c9ec7f8adde_amadey_elex_floxif_wannacry

ole32

user32

advapi32

shell32

msvcrt

kernel32

generic