General
- Target 2026-10-16_6b121bb9708cd6be7c758dd24ddfd0d5_elex_wannacry
- Size 167KB
- Sample261017-sr4jkawsbw
- SHA256 ebf8ec1feb6362c51a206078857195a3dc402954698326541707a98070552849
- MD5 6b121bb9708cd6be7c758dd24ddfd0d5
- SHA1 50c491dbec43b0492c592dbb85c74f5ce4b6632d
- SHA512 68bae061d2125b2b22ca49fb4fe3fb21368113fc8f6b32f3bb8fbeae2e0b960ff19c7aa9f7da898d22a83cdbf8c74da95c928ba782786073bce1a0762cbb2f7d
- SSDEEP 192:4/bOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwO0E4/CFxyNhoy5t:4/bLwOs8AHsc4sMfwhKQLroC4/CFsrd
- TLSH T164F308834BDE58F3F791113109798AB9927B99C4910EBEEB7F90CD65007B292D93A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-16_6b121bb9708cd6be7c758dd24ddfd0d5_elex_wannacry.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-16_6b121bb9708cd6be7c758dd24ddfd0d5_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-16_6b121bb9708cd6be7c758dd24ddfd0d5_elex_wannacry
- Size 167KB
- SHA256 ebf8ec1feb6362c51a206078857195a3dc402954698326541707a98070552849
- MD5 6b121bb9708cd6be7c758dd24ddfd0d5
- SHA1 50c491dbec43b0492c592dbb85c74f5ce4b6632d
- SHA512 68bae061d2125b2b22ca49fb4fe3fb21368113fc8f6b32f3bb8fbeae2e0b960ff19c7aa9f7da898d22a83cdbf8c74da95c928ba782786073bce1a0762cbb2f7d
- SSDEEP 192:4/bOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwO0E4/CFxyNhoy5t:4/bLwOs8AHsc4sMfwhKQLroC4/CFsrd
- TLSH T164F308834BDE58F3F791113109798AB9927B99C4910EBEEB7F90CD65007B292D93A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE