General
- Target 2026-09-29_29cf1af3bdd06173a3cd59ea73235c75_elex_wannacry
- Size 24.0MB
- Sample260930-ehgrjs1s8n
- SHA256 e1ba58e3c00656cd1a125686183f0dfe43eac5a4b14f89e0483c759fbdf9cd6b
- MD5 29cf1af3bdd06173a3cd59ea73235c75
- SHA1 02a88b7eeca683144feb88ac52816f28fb6c8b60
- SHA512 867ec6860981714b0be893aa547198397c1c724ddc5becb292287f2715d82d089053c03b5a63656678fa40d13d0d6bb971a464afe9f726d75d575e3c6c88208d
- SSDEEP 393216:Gd7Y2HvmhnS5T19t34Q6fF0w8rBBXCoK87IkWLAiwkVe3dbcUinP/RrF+fU2OQyF:4X6SxL8xmfcsITAzkG/E/Rr//
- TLSH T16A47333D57EC9D30E4DB1E32900AB3D0A2E2E0490EE1D97FBE852A44DD5A28DF55643B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-09-29_29cf1af3bdd06173a3cd59ea73235c75_elex_wannacry.exe
Resource
win10v2004-20260911-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_29cf1af3bdd06173a3cd59ea73235c75_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_29cf1af3bdd06173a3cd59ea73235c75_elex_wannacry
- Size 24.0MB
- SHA256 e1ba58e3c00656cd1a125686183f0dfe43eac5a4b14f89e0483c759fbdf9cd6b
- MD5 29cf1af3bdd06173a3cd59ea73235c75
- SHA1 02a88b7eeca683144feb88ac52816f28fb6c8b60
- SHA512 867ec6860981714b0be893aa547198397c1c724ddc5becb292287f2715d82d089053c03b5a63656678fa40d13d0d6bb971a464afe9f726d75d575e3c6c88208d
- SSDEEP 393216:Gd7Y2HvmhnS5T19t34Q6fF0w8rBBXCoK87IkWLAiwkVe3dbcUinP/RrF+fU2OQyF:4X6SxL8xmfcsITAzkG/E/Rr//
- TLSH T16A47333D57EC9D30E4DB1E32900AB3D0A2E2E0490EE1D97FBE852A44DD5A28DF55643B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1