General
- Target 2026-10-26_fd8c98f7703a6bb0f2d00f0cb0f74292_elex_wannacry
- Size 20KB
- Sample261027-bfp4csxv7j
- SHA256 5fa7d8d5f063e057c9218a4b9976b07ab43d086b8b3691a97a32e961648f0a0c
- MD5 fd8c98f7703a6bb0f2d00f0cb0f74292
- SHA1 138e9859a159bafe1bed8acb41d2d84891f49438
- SHA512 739fb5465747d44b04842aabe544a3199af0f559fcabb0fbcc9c41469e78be48367e680f2392da93b3ff920c3eab609b112b7a346034a3a5706bc4151a910630
- SSDEEP 384:uTQWckBeEd6ml1pcg7F3Gi+CW6H7s9Pj4:uxckEEd62J7F3Gig6HIlj4
- TLSH T1689241396FD51D73E3BBD7B285F7C1C6A934B0277A035D2E80861B491C23E12AD91A8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-26_fd8c98f7703a6bb0f2d00f0cb0f74292_elex_wannacry.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_fd8c98f7703a6bb0f2d00f0cb0f74292_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_fd8c98f7703a6bb0f2d00f0cb0f74292_elex_wannacry
- Size 20KB
- SHA256 5fa7d8d5f063e057c9218a4b9976b07ab43d086b8b3691a97a32e961648f0a0c
- MD5 fd8c98f7703a6bb0f2d00f0cb0f74292
- SHA1 138e9859a159bafe1bed8acb41d2d84891f49438
- SHA512 739fb5465747d44b04842aabe544a3199af0f559fcabb0fbcc9c41469e78be48367e680f2392da93b3ff920c3eab609b112b7a346034a3a5706bc4151a910630
- SSDEEP 384:uTQWckBeEd6ml1pcg7F3Gi+CW6H7s9Pj4:uxckEEd62J7F3Gig6HIlj4
- TLSH T1689241396FD51D73E3BBD7B285F7C1C6A934B0277A035D2E80861B491C23E12AD91A8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Waski payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE