5c35dece85e573f72e67ba681000c31e7b84a1835c652e947082fc7774e1d2d3

Analysis

max time kernel
150s
max time network
128s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/10/2026, 19:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-10-01_1789194322d687682301a86e8d30d6bd_elex_wannacry.exe
Size 94KB
Sample261002-x1dfyswhrd
SHA256 5c35dece85e573f72e67ba681000c31e7b84a1835c652e947082fc7774e1d2d3
MD5 1789194322d687682301a86e8d30d6bd
SHA1 2732e6fdcc85bfc3b14908a63086097227a7594c
SHA512 e024a9051eb2182cc827187a2ef7291ad579989f3808cc9997440727a46c28be56b2872b2db6b619eb37e0f924dd4002599e00e3e86299b3b77988e283e925df
SSDEEP 1536:ExiqhwlL3qCZ+Z52vnxwqrKkA2ArUOlvaHw7Q0yUO4Lr8OEIMDXOo4h11G02ZXNU:EAbL3qEzvnaqrKkA2ArUOlvaHw7Q0yUB
TLSH
T1FF93B65B6EB2C8B7C90804B1DABC63BCFAD3FDA60EA0531B13D1CE295DB9854842D459
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-10-01_1789194322d687682301a86e8d30d6bd_elex_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-01_1789194322d687682301a86e8d30d6bd_elex_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-01_1789194322d687682301a86e8d30d6bd_elex_wannacry.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2756

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:4680

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads