General
- Target 2026-10-22_a6d3d2e8f6ab76def87f0c32e388e266_elex_wannacry
- Size 50KB
- Sample261024-b5s7bae14t
- SHA256 a54843d1cbf94e4f54a7ac5c6fafb3981b807cdd7567e385a06b7091ac9a8037
- MD5 a6d3d2e8f6ab76def87f0c32e388e266
- SHA1 ec5d64a607d208e443d0b964b9f2e624e5909028
- SHA512 81e43fe12cf9ef4b96f20038e4f8420dcb26e8a85b8e3d714aef300be4b4552d51fb0d0bc3ba20c3d489e43fdca27f9c8b6d539694aed7b0fb0d8ec2ee156050
- SSDEEP 768:F/3ed1zZN/zoy0rtsGA4i2BIHRmibsa4BI:FvWbzooeOsi4a4a
- TLSH T14533DB78AFD51972E377DEB9C9F2A5C3B822B0267D06580D40C25B450D23F52EDA2A4F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-10-22_a6d3d2e8f6ab76def87f0c32e388e266_elex_wannacry.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_a6d3d2e8f6ab76def87f0c32e388e266_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_a6d3d2e8f6ab76def87f0c32e388e266_elex_wannacry
- Size 50KB
- SHA256 a54843d1cbf94e4f54a7ac5c6fafb3981b807cdd7567e385a06b7091ac9a8037
- MD5 a6d3d2e8f6ab76def87f0c32e388e266
- SHA1 ec5d64a607d208e443d0b964b9f2e624e5909028
- SHA512 81e43fe12cf9ef4b96f20038e4f8420dcb26e8a85b8e3d714aef300be4b4552d51fb0d0bc3ba20c3d489e43fdca27f9c8b6d539694aed7b0fb0d8ec2ee156050
- SSDEEP 768:F/3ed1zZN/zoy0rtsGA4i2BIHRmibsa4BI:FvWbzooeOsi4a4a
- TLSH T14533DB78AFD51972E377DEB9C9F2A5C3B822B0267D06580D40C25B450D23F52EDA2A4F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detects executables built or packed with MPress PE compressor
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE