General
- Target 2026-10-25_ab3d4a325f6c461bea6f61c5e7ebb401_elex_wannacry
- Size 60KB
- Sample261026-t2mjgaxyay
- SHA256 67fc301fba227ec9b7a24999021bfc9ad9ae1fbb3063cb461e2cef91f638f397
- MD5 ab3d4a325f6c461bea6f61c5e7ebb401
- SHA1 530b9d3313c4ceddb58ce17dc7cff2dd24bcefb7
- SHA512 9ff029718aebef41732e6d5a894fb8b6c647a0fda99112cced0e21db7b955a4b1ae1f0f169f1c01c595ea7a1491a84555fa5bee2aac0b3eb8aac1791eb178e5a
- SSDEEP 192:obOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwBY04/CFxyNhoy5t/:obLwOs8AHsc4sMfwhKQLroz4/CFsrd/
- TLSH T18B5307834BDE9CF2F791117108798BB9927B99D4950EBEDFAF90CD150077292E83A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-25_ab3d4a325f6c461bea6f61c5e7ebb401_elex_wannacry.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-25_ab3d4a325f6c461bea6f61c5e7ebb401_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-25_ab3d4a325f6c461bea6f61c5e7ebb401_elex_wannacry
- Size 60KB
- SHA256 67fc301fba227ec9b7a24999021bfc9ad9ae1fbb3063cb461e2cef91f638f397
- MD5 ab3d4a325f6c461bea6f61c5e7ebb401
- SHA1 530b9d3313c4ceddb58ce17dc7cff2dd24bcefb7
- SHA512 9ff029718aebef41732e6d5a894fb8b6c647a0fda99112cced0e21db7b955a4b1ae1f0f169f1c01c595ea7a1491a84555fa5bee2aac0b3eb8aac1791eb178e5a
- SSDEEP 192:obOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwBY04/CFxyNhoy5t/:obLwOs8AHsc4sMfwhKQLroz4/CFsrd/
- TLSH T18B5307834BDE9CF2F791117108798BB9927B99D4950EBEDFAF90CD150077292E83A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE