wannacry | 1db1aed2763c8f59d6a7dc55787c36c6e2ff78ab7d479e516f42c678f17996be | Triage™

Login
Reports

Overview

overview

Static

static

3

2026-10-22...ry.exe

windows10-2004-x64

2026-10-22...ry.exe

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-22_7d095c4c7288e967612d45a3a64fcff2_coinminer_elex_wannacry
Size 3.6MB
Sample261024-jaz1daav3j
SHA256 1db1aed2763c8f59d6a7dc55787c36c6e2ff78ab7d479e516f42c678f17996be
MD5 7d095c4c7288e967612d45a3a64fcff2
SHA1 ead3d9ec63f10573d9a3fdc60e20b9c50b1ef94c
SHA512 b8335eaf09402f020d49b4216f598ba931467acc0375b4d450a9ac4dbe7fa9d42033f86d4445eb7af33cf007871a564e5f83a41b2a8a7038aaa0d385fd381a96
SSDEEP 49152:EnAQqMSPbcBVQej/1IN01HkQo6SAARdhnvxJM0H9PAMEcaEaue5c/bXZROAx:0DqPoBhz1auk36SAEdhvxWa9P59Uc/J
TLSH
T117062322E11861B6E4A305F404EEAB26E1BF3C2407B795C7AB54466A4C217F77B34F4B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

wannacry defense_evasion discovery privilege_escalation ransomware worm

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-10-22_7d095c4c7288e967612d45a3a64fcff2_coinminer_elex_wannacry.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

13 signatures

150 seconds

defense_evasion discovery wannacry privilege_escalation ransomware worm

Behavioral task

behavioral2

Sample

2026-10-22_7d095c4c7288e967612d45a3a64fcff2_coinminer_elex_wannacry.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

13 signatures

150 seconds

defense_evasion discovery wannacry privilege_escalation ransomware worm

Malware Config

Targets

- Target
  2026-10-22_7d095c4c7288e967612d45a3a64fcff2_coinminer_elex_wannacry
- Size 3.6MB
- SHA256 1db1aed2763c8f59d6a7dc55787c36c6e2ff78ab7d479e516f42c678f17996be
- MD5 7d095c4c7288e967612d45a3a64fcff2
- SHA1 ead3d9ec63f10573d9a3fdc60e20b9c50b1ef94c
- SHA512 b8335eaf09402f020d49b4216f598ba931467acc0375b4d450a9ac4dbe7fa9d42033f86d4445eb7af33cf007871a564e5f83a41b2a8a7038aaa0d385fd381a96
- SSDEEP 49152:EnAQqMSPbcBVQej/1IN01HkQo6SAARdhnvxJM0H9PAMEcaEaue5c/bXZROAx:0DqPoBhz1auk36SAEdhvxWa9P59Uc/J
- TLSH
  T117062322E11861B6E4A305F404EEAB26E1BF3C2407B795C7AB54466A4C217F77B34F4B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery wannacry privilege_escalation ransomware worm
- Family: Wannacry
  WannaCry is a ransomware cryptoworm.
  ransomware worm wannacry
- Modifies firewall policy service
  defense_evasion
- Contacts a large (3347) amount of remote hosts
  This may indicate a network scan to discover remotely running services.
  discovery
- Drops file in Drivers directory
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Process Injection

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Process Injection

Credential Access

Discovery

Network Service Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverywannacryprivilege_escalationransomwareworm

behavioral2

defense_evasiondiscoverywannacryprivilege_escalationransomwareworm

© 2018-2026

Terms | Privacy