General
- Target 2026-10-16_a0d7a98574bff60caeec303382e7bb4f_elex_wannacry
- Size 59KB
- Sample261017-mm8d3aed66
- SHA256 72ee709bef6f96923ed87addd35387f9dcfa23d733a39118270611b3dbfba944
- MD5 a0d7a98574bff60caeec303382e7bb4f
- SHA1 8861299c966c8994a44ff8c97d6a4f5c0f36b915
- SHA512 cbbe5bc0937f556bad0da91d5c2dab5ad2ddede00267da63c06a9e277231ddf5af9d9917202a1a2a05d8b575680ea2cd231f8ba033b631bfbd34da5699d43b94
- SSDEEP 384:MbLwOs8AHsc4sMfwhKQLrojXP3z4/CFsrcGIiXY1nhbHQn:Mvw9816vhKQLrojXfz4/wQDIi4dHQ
- TLSH T1AE436C831BE948F2F7911171017D5BB9527BAAC0D209BEDB7F80DE28517B242E53E14A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-16_a0d7a98574bff60caeec303382e7bb4f_elex_wannacry.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-16_a0d7a98574bff60caeec303382e7bb4f_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-16_a0d7a98574bff60caeec303382e7bb4f_elex_wannacry
- Size 59KB
- SHA256 72ee709bef6f96923ed87addd35387f9dcfa23d733a39118270611b3dbfba944
- MD5 a0d7a98574bff60caeec303382e7bb4f
- SHA1 8861299c966c8994a44ff8c97d6a4f5c0f36b915
- SHA512 cbbe5bc0937f556bad0da91d5c2dab5ad2ddede00267da63c06a9e277231ddf5af9d9917202a1a2a05d8b575680ea2cd231f8ba033b631bfbd34da5699d43b94
- SSDEEP 384:MbLwOs8AHsc4sMfwhKQLrojXP3z4/CFsrcGIiXY1nhbHQn:Mvw9816vhKQLrojXfz4/wQDIi4dHQ
- TLSH T1AE436C831BE948F2F7911171017D5BB9527BAAC0D209BEDB7F80DE28517B242E53E14A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Stormser aka Storm DDoS and StormAttack
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE