General
- Target 2026-10-04_b80df64304ffe2d5a4c2dd5c8a56e4b2_elex_hacktools_wannacry
- Size 732KB
- Sample261005-fh6akstdlf
- SHA256 e1f122966fc686c85d3673a388fdd5e4f9f4d694ff02fb85ad7f8b0bd0212771
- MD5 b80df64304ffe2d5a4c2dd5c8a56e4b2
- SHA1 45f6b3baea3e2961cf694554f3ae7759afb25b4a
- SHA512 64ba0b52f2bfd2edd6bf29a87d231ea3b422e4543097835bb3559cced706a484448bbbce3512d6ba23261623966a647945b1306954c499be6947a5e25a6c850f
- SSDEEP 12288:4c0dZib4t9uOroAgUHvCUt4RtlTc+YNKpQsNvVdig:4c/UtwOrZgUHv54Rt6+YNkQsNf
- TLSH T110F4AD1279C2807EC176057189596BB5EAF6FE680E3A8D436388FE3C9975E01DA1373C
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-04_b80df64304ffe2d5a4c2dd5c8a56e4b2_elex_hacktools_wannacry.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-04_b80df64304ffe2d5a4c2dd5c8a56e4b2_elex_hacktools_wannacry.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-04_b80df64304ffe2d5a4c2dd5c8a56e4b2_elex_hacktools_wannacry
- Size 732KB
- SHA256 e1f122966fc686c85d3673a388fdd5e4f9f4d694ff02fb85ad7f8b0bd0212771
- MD5 b80df64304ffe2d5a4c2dd5c8a56e4b2
- SHA1 45f6b3baea3e2961cf694554f3ae7759afb25b4a
- SHA512 64ba0b52f2bfd2edd6bf29a87d231ea3b422e4543097835bb3559cced706a484448bbbce3512d6ba23261623966a647945b1306954c499be6947a5e25a6c850f
- SSDEEP 12288:4c0dZib4t9uOroAgUHvCUt4RtlTc+YNKpQsNvVdig:4c/UtwOrZgUHv54Rt6+YNkQsNf
- TLSH T110F4AD1279C2807EC176057189596BB5EAF6FE680E3A8D436388FE3C9975E01DA1373C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: FlawedAmmyy RAT
Remote-access trojan based on leaked code for the Ammyy remote admin software.
-
Drops file in System32 directory