General
- Target 2026-09-30_61b79fb8f2b144b6b22f3e5a62a33a39_elex_wannacry
- Size 90KB
- Sample260930-m3x82asalg
- SHA256 e2b9ca4e890756d332fb9f2f6d4077864c8fcc1758d41ae68ad3b1b2be49cad6
- MD5 61b79fb8f2b144b6b22f3e5a62a33a39
- SHA1 2d671760d3a2d7e773402058096948cf64b83adf
- SHA512 41ea99ca20e97fefafc56705182a5e8cc26f2d6ee3bf5637a092aa7ea2bc772b242c61f7848d42afe675b1e092e7c72656b8b5a5e043e9aae1769ad3912a6a12
- SSDEEP 768:Qvw9816vhKQLroM4/wQRNrfrunMxVFA3b7gl/:YEGh0oMl2unMxVS3HgR
- TLSH T1A393B43D5DDA1037E2B7D6B585F126E3FE66B983390A1D0E469343428D23B53AD8AC1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-30_61b79fb8f2b144b6b22f3e5a62a33a39_elex_wannacry.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-30_61b79fb8f2b144b6b22f3e5a62a33a39_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_61b79fb8f2b144b6b22f3e5a62a33a39_elex_wannacry
- Size 90KB
- SHA256 e2b9ca4e890756d332fb9f2f6d4077864c8fcc1758d41ae68ad3b1b2be49cad6
- MD5 61b79fb8f2b144b6b22f3e5a62a33a39
- SHA1 2d671760d3a2d7e773402058096948cf64b83adf
- SHA512 41ea99ca20e97fefafc56705182a5e8cc26f2d6ee3bf5637a092aa7ea2bc772b242c61f7848d42afe675b1e092e7c72656b8b5a5e043e9aae1769ad3912a6a12
- SSDEEP 768:Qvw9816vhKQLroM4/wQRNrfrunMxVFA3b7gl/:YEGh0oMl2unMxVS3HgR
- TLSH T1A393B43D5DDA1037E2B7D6B585F126E3FE66B983390A1D0E469343428D23B53AD8AC1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE