General
- Target 2026-09-30_70fab50e8e7dc6bbc8fe77d23d2718d1_elex_wannacry
- Size 59KB
- Sample260930-mklsaaxw7r
- SHA256 8a88e14b080f7d6f585086852ac4a4cc690152fe9216b92ab6c8a4d2b60490d0
- MD5 70fab50e8e7dc6bbc8fe77d23d2718d1
- SHA1 a1b9446455c46b6a7eadd5c48b57a36c7425f416
- SHA512 3185b0cc0444bd5cdc3e9355be7eb6aaad9e8fbe21a91dd4f0147e393992997a509c2fb92b2de1d2b07a015e4ddade5ceee3aac16b75f8ad8220077bc9b3fc6b
- SSDEEP 384:MbLwOs8AHsc4sMfwhKQLroomaQP4/CFsrFJGlMlrWg:Mvw9816vhKQLroLaQP4/wQTGaW
- TLSH T1EA436B835BDA1CF2F2E1123205B846B5D22B9AD4911DBEEBBB90DE0904372D1D53E14A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-30_70fab50e8e7dc6bbc8fe77d23d2718d1_elex_wannacry.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-30_70fab50e8e7dc6bbc8fe77d23d2718d1_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_70fab50e8e7dc6bbc8fe77d23d2718d1_elex_wannacry
- Size 59KB
- SHA256 8a88e14b080f7d6f585086852ac4a4cc690152fe9216b92ab6c8a4d2b60490d0
- MD5 70fab50e8e7dc6bbc8fe77d23d2718d1
- SHA1 a1b9446455c46b6a7eadd5c48b57a36c7425f416
- SHA512 3185b0cc0444bd5cdc3e9355be7eb6aaad9e8fbe21a91dd4f0147e393992997a509c2fb92b2de1d2b07a015e4ddade5ceee3aac16b75f8ad8220077bc9b3fc6b
- SSDEEP 384:MbLwOs8AHsc4sMfwhKQLroomaQP4/CFsrFJGlMlrWg:Mvw9816vhKQLroLaQP4/wQTGaW
- TLSH T1EA436B835BDA1CF2F2E1123205B846B5D22B9AD4911DBEEBBB90DE0904372D1D53E14A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE