General

  • Target
    2026-10-01_619285e5662ca42bf66716ddb424d116_elex_wannacry
  • Size 909KB
  • Sample261002-qqtxmaxy8m
  • SHA256 46533f05c054b91184ab407f7d97d18b5ab65820f3f2b8bece257cdc9f0ab34e
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-10-01_619285e5662ca42bf66716ddb424d116_elex_wannacry
    • Size 909KB
    • SHA256 46533f05c054b91184ab407f7d97d18b5ab65820f3f2b8bece257cdc9f0ab34e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Modifies firewall policy service

    • Adds policy Run key to start application

    • Executes a file named after a Windows system binary

      The file runs from a user directory while carrying the name of an executable that normally only exists in System32.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks