General
- Target 2026-10-22_2c3b6a45b46474c099de5750b39e33f9_elex_wannacry
- Size 76KB
- Sample261024-wn16ta1s8p
- SHA256 3e7c8a3e87cfb233879fbf26e1dd7038ce9f9b3b79086fea002c9ef8d5418671
- MD5 2c3b6a45b46474c099de5750b39e33f9
- SHA1 d39b3e769e3cabda3b089fca023c1b5653207e10
- SHA512 1a36ee0f4146e160027794418463c4d7e3ff3235bcfe77db0c1a588dff8c07e38761364799a02a866acb124acaa3e36f32298b8829e820402cd904623ce5e7a3
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLro64/CFsrdOI1Nb7g7FX7XYfruVDtM9tQ/FKlnVwU1:vvw9816vhKQLro64/wQRNrfrunMxVD
- TLSH T11973923E5EDA1037E1B3D2B585F16AE7FE66B98239091D0E46D243418D23B53BC8AC1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-22_2c3b6a45b46474c099de5750b39e33f9_elex_wannacry.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_2c3b6a45b46474c099de5750b39e33f9_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_2c3b6a45b46474c099de5750b39e33f9_elex_wannacry
- Size 76KB
- SHA256 3e7c8a3e87cfb233879fbf26e1dd7038ce9f9b3b79086fea002c9ef8d5418671
- MD5 2c3b6a45b46474c099de5750b39e33f9
- SHA1 d39b3e769e3cabda3b089fca023c1b5653207e10
- SHA512 1a36ee0f4146e160027794418463c4d7e3ff3235bcfe77db0c1a588dff8c07e38761364799a02a866acb124acaa3e36f32298b8829e820402cd904623ce5e7a3
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLro64/CFsrdOI1Nb7g7FX7XYfruVDtM9tQ/FKlnVwU1:vvw9816vhKQLro64/wQRNrfrunMxVD
- TLSH T11973923E5EDA1037E1B3D2B585F16AE7FE66B98239091D0E46D243418D23B53BC8AC1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE