General
- Target 2026-10-02_3b52a7c0ea4ee3861b009822a84225d3_cloudeye_elex_hijackloader_shodi_wannacry
- Size 489KB
- Sample261003-rmybbazgmc
- SHA256 b1b3b81288c8040ef914189c5fec4477caf4fff83ab2a4da8b2d534ff9e33b8f
- MD5 3b52a7c0ea4ee3861b009822a84225d3
- SHA1 8f40f57e2acde3898abd7c3e053a6782b50e43f9
- SHA512 6f92f09e464855fd8e27278a107417de5cd1129fae50ef044fa008be4e2b7f46949c5d3a953f3ee0a590ae48cb40d8d9c6d40365abcc2f1b0b4430df1bb3dbd7
- SSDEEP 3072:+T1bNRCywDw1DiJkunUNRD5bp3szMY5RHPvpW0em7y6twVs4yzgPmNAnoryFyaBG:+T1bT4DtLUjD5xszhRHPxL9es0mPH+W
- TLSH T1DFB40902B780E523D6AE4A3068F9D76A2B31FCC63F52874B2315B2DC5E31351AE6525F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-02_3b52a7c0ea4ee3861b009822a84225d3_cloudeye_elex_hijackloader_shodi_wannacry.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-02_3b52a7c0ea4ee3861b009822a84225d3_cloudeye_elex_hijackloader_shodi_wannacry
- Size 489KB
- SHA256 b1b3b81288c8040ef914189c5fec4477caf4fff83ab2a4da8b2d534ff9e33b8f
- MD5 3b52a7c0ea4ee3861b009822a84225d3
- SHA1 8f40f57e2acde3898abd7c3e053a6782b50e43f9
- SHA512 6f92f09e464855fd8e27278a107417de5cd1129fae50ef044fa008be4e2b7f46949c5d3a953f3ee0a590ae48cb40d8d9c6d40365abcc2f1b0b4430df1bb3dbd7
- SSDEEP 3072:+T1bNRCywDw1DiJkunUNRD5bp3szMY5RHPvpW0em7y6twVs4yzgPmNAnoryFyaBG:+T1bT4DtLUjD5xszhRHPxL9es0mPH+W
- TLSH T1DFB40902B780E523D6AE4A3068F9D76A2B31FCC63F52874B2315B2DC5E31351AE6525F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1