383e5d5e82a992df19457b98d9c72d40755ab5bc905cf772c2dea4c81cfa5da0

Analysis

max time kernel
149s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/10/2026, 07:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-10-22_7c506ce85e35a1abd68d0590710f2879_amadey_elex_wannacry.exe
Size 10.3MB
Sample261024-jec2eaee48
SHA256 383e5d5e82a992df19457b98d9c72d40755ab5bc905cf772c2dea4c81cfa5da0
MD5 7c506ce85e35a1abd68d0590710f2879
SHA1 4adaee95d0f2c30b2c75feb45d68c5d8bcef2a2a
SHA512 2f78d8aedc471eee14505a2191b9e8197e1dd914825ee380605e2c99c38ebc8465fda882d6a96956067e9bdde5c676c76afea9bfe996f678bbddefa17b876f0c
SSDEEP 196608:4i6ifl5WjZ3msg4Ppx/iUGN/QsIFqy9nmVg9iX2OKhYSUJ7a:4Bi7WjZ2sg4Pz/I/UFJmwNOKqm
TLSH
T14AB6333271E588BFC815A5309EE897B9B2EF9706CF68145790484E0DD7A38B2C534BED
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-10-22_7c506ce85e35a1abd68d0590710f2879_amadey_elex_wannacry.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1056	2026-10-22_7c506ce85e35a1abd68d0590710f2879_amadey_elex_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-22_7c506ce85e35a1abd68d0590710f2879_amadey_elex_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-22_7c506ce85e35a1abd68d0590710f2879_amadey_elex_wannacry.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
PID:1056

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CAPmaps-Thai.bmp

Path C:\Users\Admin\AppData\Local\Temp\CAPmaps-Thai.bmp
Size 3.1MB
SHA256 4671af8f4a1b61fb68e91de1cd9160ee2b400d3e2436b3fa2af21f729a5dc6ef
MD5 d507f4d7a5edcd655fd8f44e4ccd6418
SHA1 8af5a91c6b08730ecd9d549058196c07a55cfc11
SHA512 799e24c5c2f8669b050b3b71d137abc14b7b341de4e79c0e68d706561aaf8c926d46c23e78dc0075c7c8db2412ab16e4ded8adcb452361dc11ef605857eeea34
SSDEEP 768:EpLJueuHQy1YoZ9OlM+sqgIw6h294GkJPkwOvsZxBmksHHLMB+nCdww+HpnMzNox:E78aqZa294yk4HLz
TLSH
T1BFE53A9C63C7F7AEE00831B66370768609BFE8FB6A1BD94D5A5612837810378D546C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download