General
- Target 2026-10-27_ecfc4a6166d5fd367b390fe5b1c39aa9_elex_wannacry
- Size 79KB
- Sample261027-2x62baxtfw
- SHA256 b75b6686037b7c6344fe5a35d1d35faabcb4cb66b3fb2eb26d110d8d585ea766
- MD5 ecfc4a6166d5fd367b390fe5b1c39aa9
- SHA1 6a2b7e6cc15bc0eec643fd90825d3c7edd88ab5c
- SHA512 4e397b114459ee1b79e77ba5739cb3d5b5694f52e0f9cb64b3e35bc32a4fe6cdaabf0063f35f8d43eb0ae7f150469ad47672925948fdefcb8cb2cde3651004a8
- SSDEEP 768:4vw9816vhKQLro34/wQzXOQ69zbjlAAX5e9zZ:wEGh0o3lGizbR9XwzZ
- TLSH T159834BD38EAC4483FDD6697012B8DAB77C3E97C61504B99B6B91FD5408A33C1EB2411E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-27_ecfc4a6166d5fd367b390fe5b1c39aa9_elex_wannacry.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-27_ecfc4a6166d5fd367b390fe5b1c39aa9_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-27_ecfc4a6166d5fd367b390fe5b1c39aa9_elex_wannacry
- Size 79KB
- SHA256 b75b6686037b7c6344fe5a35d1d35faabcb4cb66b3fb2eb26d110d8d585ea766
- MD5 ecfc4a6166d5fd367b390fe5b1c39aa9
- SHA1 6a2b7e6cc15bc0eec643fd90825d3c7edd88ab5c
- SHA512 4e397b114459ee1b79e77ba5739cb3d5b5694f52e0f9cb64b3e35bc32a4fe6cdaabf0063f35f8d43eb0ae7f150469ad47672925948fdefcb8cb2cde3651004a8
- SSDEEP 768:4vw9816vhKQLro34/wQzXOQ69zbjlAAX5e9zZ:wEGh0o3lGizbR9XwzZ
- TLSH T159834BD38EAC4483FDD6697012B8DAB77C3E97C61504B99B6B91FD5408A33C1EB2411E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE