General
- Target 2026-10-22_4845a84e3e269078dc2e481756c6255f_elex_wannacry
- Size 92KB
- Sample261024-rpshvavvds
- SHA256 603678e2e2e95020aa9d1157f68063311661542c043a99147e1403f74bdb61d2
- MD5 4845a84e3e269078dc2e481756c6255f
- SHA1 8e2cc689e3bb7d19fa12ed15c330a2fa452db20f
- SHA512 23c1232a4ad63b5deb00f09a6b6d7127e91546273e5a0475e134e292650eb245125778f9ba12039df4b2f7e6dd9763509f4e40e9a286241ec4c2e846289c5027
- SSDEEP 192:ubOzawOs81elJHsc45gcRZOptShcWaOT2QLrCqwUY04/CFxyNhoy5tDXXXXXXXXN:ubLwOs8AHsc4qMewhKQLroi4/CFsrd5
- TLSH T1FE93D47306ADB8A3F6406D3B342C47F4912F778E5389699A7A7FC90C00FE1619739166
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-22_4845a84e3e269078dc2e481756c6255f_elex_wannacry.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_4845a84e3e269078dc2e481756c6255f_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_4845a84e3e269078dc2e481756c6255f_elex_wannacry
- Size 92KB
- SHA256 603678e2e2e95020aa9d1157f68063311661542c043a99147e1403f74bdb61d2
- MD5 4845a84e3e269078dc2e481756c6255f
- SHA1 8e2cc689e3bb7d19fa12ed15c330a2fa452db20f
- SHA512 23c1232a4ad63b5deb00f09a6b6d7127e91546273e5a0475e134e292650eb245125778f9ba12039df4b2f7e6dd9763509f4e40e9a286241ec4c2e846289c5027
- SSDEEP 192:ubOzawOs81elJHsc45gcRZOptShcWaOT2QLrCqwUY04/CFxyNhoy5tDXXXXXXXXN:ubLwOs8AHsc4qMewhKQLroi4/CFsrd5
- TLSH T1FE93D47306ADB8A3F6406D3B342C47F4912F778E5389699A7A7FC90C00FE1619739166
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Stormser aka Storm DDoS and StormAttack
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE