General
- Target 2026-10-16_ee8a8e35053671dd79a7635afab55807_elex_wannacry
- Size 76KB
- Sample261017-dsty7awscz
- SHA256 fbd768de6c5a65b59eafd8263da6ffe3981b7019e69eba51e7e4a4256f929964
- MD5 ee8a8e35053671dd79a7635afab55807
- SHA1 56216c5cb9d62152dbaa843dbde9b0eadc1a5173
- SHA512 e8965dd0487d5fb5b5a5e2f1d8b223a9fdd3c58d86f71c416f8d7d0aef032d756bc7e19dd6513f8742044d3d90d2fa32999bc667b72329543f6079deb6c41c79
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLroZ4/CFsrdOI1Nb7g7FX7XYfruVDtM9tQ/FKlnVwU1:vvw9816vhKQLroZ4/wQRNrfrunMxVD
- TLSH T1F473823E5EDA1037E1B3D2B585F16AE7FE26B98239091D0E46D643418D23B53BC8AC1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-16_ee8a8e35053671dd79a7635afab55807_elex_wannacry.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-16_ee8a8e35053671dd79a7635afab55807_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-16_ee8a8e35053671dd79a7635afab55807_elex_wannacry
- Size 76KB
- SHA256 fbd768de6c5a65b59eafd8263da6ffe3981b7019e69eba51e7e4a4256f929964
- MD5 ee8a8e35053671dd79a7635afab55807
- SHA1 56216c5cb9d62152dbaa843dbde9b0eadc1a5173
- SHA512 e8965dd0487d5fb5b5a5e2f1d8b223a9fdd3c58d86f71c416f8d7d0aef032d756bc7e19dd6513f8742044d3d90d2fa32999bc667b72329543f6079deb6c41c79
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLroZ4/CFsrdOI1Nb7g7FX7XYfruVDtM9tQ/FKlnVwU1:vvw9816vhKQLroZ4/wQRNrfrunMxVD
- TLSH T1F473823E5EDA1037E1B3D2B585F16AE7FE26B98239091D0E46D643418D23B53BC8AC1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Stormser aka Storm DDoS and StormAttack
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE