General
- Target 2026-10-22_964df53d24856c253fce1b4b814c9464_elex_wannacry
- Size 168KB
- Sample261024-elcxrsstft
- SHA256 d1e903e5ef0e21860b406e61859cc798c9fadc4aad617ae29a6a9d0a36523e79
- MD5 964df53d24856c253fce1b4b814c9464
- SHA1 ebe72209564f05a9c3904324562fa17c6ba67eb4
- SHA512 0c9e7f290319b3e6daabea92abd9379a904bd02640950be0820749c2eacdf218ce26f9a2a2de7cfbec09c2da9420147d8e848710db19394c1bf64f03edeb3a6a
- SSDEEP 192:pbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwc4/CFxyNhoy5t:pbLwOs8AHsc4sMfwhKQLroc4/CFsrd
- TLSH T19FF319834BDE58F3F781113008798AB9927B9AD4961EBEEF7F90CD250077252D53A50B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-22_964df53d24856c253fce1b4b814c9464_elex_wannacry.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_964df53d24856c253fce1b4b814c9464_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_964df53d24856c253fce1b4b814c9464_elex_wannacry
- Size 168KB
- SHA256 d1e903e5ef0e21860b406e61859cc798c9fadc4aad617ae29a6a9d0a36523e79
- MD5 964df53d24856c253fce1b4b814c9464
- SHA1 ebe72209564f05a9c3904324562fa17c6ba67eb4
- SHA512 0c9e7f290319b3e6daabea92abd9379a904bd02640950be0820749c2eacdf218ce26f9a2a2de7cfbec09c2da9420147d8e848710db19394c1bf64f03edeb3a6a
- SSDEEP 192:pbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwc4/CFxyNhoy5t:pbLwOs8AHsc4sMfwhKQLroc4/CFsrd
- TLSH T19FF319834BDE58F3F781113008798AB9927B9AD4961EBEEF7F90CD250077252D53A50B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE