General
- Target 2026-10-22_a3e8d2780ab865de359041966f2674e1_elex_wannacry
- Size 11.4MB
- Sample261024-ckheraea65
- SHA256 2f79bbb98234656faab1310f685cf39521e5d48e37c231dd6db9c4982a0b10a5
- MD5 a3e8d2780ab865de359041966f2674e1
- SHA1 e93c90c7c51956e7062541abf3ba235a8b1a6d95
- SHA512 fc513f3e7dff9e994136d42b98ba3d51f445b16b719f26d5a53ac45ea62ce062df412ef2d5897d363cea40b440946ae13ca5f8b482f5eb56ddb6550cb79c6309
- SSDEEP 196608:15aF+3CoFGoYt2Hys68rSHeDqbdxlQOoSAOmantbVZFAz9ON/y5S8e:15awCQrYtS68ZDUo1OVntbVZFAzq
- TLSH T101C633063F6FB4F9E29644F48541FBA946EDE4B44BC8969389C1AA056E331C9F13D0CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_a3e8d2780ab865de359041966f2674e1_elex_wannacry.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_a3e8d2780ab865de359041966f2674e1_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_a3e8d2780ab865de359041966f2674e1_elex_wannacry
- Size 11.4MB
- SHA256 2f79bbb98234656faab1310f685cf39521e5d48e37c231dd6db9c4982a0b10a5
- MD5 a3e8d2780ab865de359041966f2674e1
- SHA1 e93c90c7c51956e7062541abf3ba235a8b1a6d95
- SHA512 fc513f3e7dff9e994136d42b98ba3d51f445b16b719f26d5a53ac45ea62ce062df412ef2d5897d363cea40b440946ae13ca5f8b482f5eb56ddb6550cb79c6309
- SSDEEP 196608:15aF+3CoFGoYt2Hys68rSHeDqbdxlQOoSAOmantbVZFAz9ON/y5S8e:15awCQrYtS68ZDUo1OVntbVZFAzq
- TLSH T101C633063F6FB4F9E29644F48541FBA946EDE4B44BC8969389C1AA056E331C9F13D0CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.