General
- Target 2026-10-19_a0ca055a25fbb32dffce337cd3ad0c4d_elex_wannacry
- Size 59KB
- Sample261020-nfbbesgz3y
- SHA256 491fff5aa289e45b3b8db178585e796730a9c0f4b442e76df57303767316ab7c
- MD5 a0ca055a25fbb32dffce337cd3ad0c4d
- SHA1 88cf8ccf66f6266ea84bd496a1a880ed7b1bef4f
- SHA512 4edac5d586cc97b867d34699116fb46d6fe938dc14224310753291ce97fa74c341466c718a5c53aa0d433d915d3d4a2faa954b29cc8c10ba85e9f7794af8d27d
- SSDEEP 384:MbLwOs8AHsc4sMfwhKQLrojXP3h4/CFsrcGIiXY1nhbHQn:Mvw9816vhKQLrojXfh4/wQDIi4dHQ
- TLSH T1ED436C830FE948F2F7911171017D5BB9627BAAC0D609BEDB7F80DE28517B242E53E14A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-19_a0ca055a25fbb32dffce337cd3ad0c4d_elex_wannacry.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-19_a0ca055a25fbb32dffce337cd3ad0c4d_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-19_a0ca055a25fbb32dffce337cd3ad0c4d_elex_wannacry
- Size 59KB
- SHA256 491fff5aa289e45b3b8db178585e796730a9c0f4b442e76df57303767316ab7c
- MD5 a0ca055a25fbb32dffce337cd3ad0c4d
- SHA1 88cf8ccf66f6266ea84bd496a1a880ed7b1bef4f
- SHA512 4edac5d586cc97b867d34699116fb46d6fe938dc14224310753291ce97fa74c341466c718a5c53aa0d433d915d3d4a2faa954b29cc8c10ba85e9f7794af8d27d
- SSDEEP 384:MbLwOs8AHsc4sMfwhKQLrojXP3h4/CFsrcGIiXY1nhbHQn:Mvw9816vhKQLrojXfh4/wQDIi4dHQ
- TLSH T1ED436C830FE948F2F7911171017D5BB9627BAAC0D609BEDB7F80DE28517B242E53E14A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE