General
- Target 2026-10-22_c81d76e8457ed7e947ae5ab02dee37c0_elex_wannacry
- Size 60KB
- Sample261023-zphbwazyft
- SHA256 b9d61eb960e319d98a27c81d7a3811dc6f7f0659bd9a26b53d3161c29f0c3296
- MD5 c81d76e8457ed7e947ae5ab02dee37c0
- SHA1 ffa029dd75188916368f982ca9705e5e54210dc7
- SHA512 26ff1b48d9f50c0fc73533f5c7381ab3e4fa80ab36852306dab42404eb0d50fc8e3c72464906c152d03511c4faeb3d229e8bc312216c8432dcf80bc5b01d6d88
- SSDEEP 192:obOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqw4Y04/CFxyNhoy5t/:obLwOs8AHsc4sMfwhKQLrom4/CFsrd/
- TLSH T1005308834BDE5CF2FB91117108798BB9927B99D4910EBEDFAF90CD150037292E43A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-22_c81d76e8457ed7e947ae5ab02dee37c0_elex_wannacry.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_c81d76e8457ed7e947ae5ab02dee37c0_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_c81d76e8457ed7e947ae5ab02dee37c0_elex_wannacry
- Size 60KB
- SHA256 b9d61eb960e319d98a27c81d7a3811dc6f7f0659bd9a26b53d3161c29f0c3296
- MD5 c81d76e8457ed7e947ae5ab02dee37c0
- SHA1 ffa029dd75188916368f982ca9705e5e54210dc7
- SHA512 26ff1b48d9f50c0fc73533f5c7381ab3e4fa80ab36852306dab42404eb0d50fc8e3c72464906c152d03511c4faeb3d229e8bc312216c8432dcf80bc5b01d6d88
- SSDEEP 192:obOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqw4Y04/CFxyNhoy5t/:obLwOs8AHsc4sMfwhKQLrom4/CFsrd/
- TLSH T1005308834BDE5CF2FB91117108798BB9927B99D4910EBEDFAF90CD150037292E43A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE