da4c00474cd4146e44d761a19dd2e4a4050f7b05e63dc10e186143973d4facc8

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/10/2026, 17:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-09-30_27235afb6d6823f25c7ec6c6b583ceb4_elex_wannacry.exe
Size 192KB
Sample261001-vrfhvavyew
SHA256 da4c00474cd4146e44d761a19dd2e4a4050f7b05e63dc10e186143973d4facc8
MD5 27235afb6d6823f25c7ec6c6b583ceb4
SHA1 f09e5fc6c9e4257188922254e4e534f94e5ba471
SHA512 509854fd692dda30403937747980df9bb14996d9315d65df502e87ba17de9508bfb4c52a0306ee1878782bd6d00b967dec0d76f7fe87f640c3c6866bcc378f66
SSDEEP 1536:1Q8MF/7viw0IpRaNtR5LWzpw5PboEymE6f:C8MF/7viw0IpRaNtRAFw5Pc+E6
TLSH
T1D6147D3FB3921DBEC0E404762A5666F22778BD301AB5BA07EF54094B4EF19EDA430217
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2156	3532	WerFault.exe	84

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-09-30_27235afb6d6823f25c7ec6c6b583ceb4_elex_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-30_27235afb6d6823f25c7ec6c6b583ceb4_elex_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-30_27235afb6d6823f25c7ec6c6b583ceb4_elex_wannacry.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3532
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3532 -s 220
  2⤵
  - Program crash
  PID:2156

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3532 -ip 3532
1⤵
PID:4828

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads