General

  • Target
    2026-10-01_4e124a6cedb1401eff0355d2d9fb92b4_elex_wannacry
  • Size 911KB
  • Sample261002-semqaacf26
  • SHA256 5fb0e124aa181e88be21aeb17f411182b2ee4c9aa04940c24b3a5b3273e61ebd
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-10-01_4e124a6cedb1401eff0355d2d9fb92b4_elex_wannacry
    • Size 911KB
    • SHA256 5fb0e124aa181e88be21aeb17f411182b2ee4c9aa04940c24b3a5b3273e61ebd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Modifies firewall policy service

    • Adds policy Run key to start application

    • Executes a file named after a Windows system binary

      The file runs from a user directory while carrying the name of an executable that normally only exists in System32.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks