General
- Target 2026-10-26_a2ac22f02a2ffb02171f2877ed79fa5e_elex_wannacry
- Size 60KB
- Sample261027-md6h4sds3n
- SHA256 ab6f67ed41efdc5f2923252a599fe2c6d2d995196abcf09a77128d913dc2a2ab
- MD5 a2ac22f02a2ffb02171f2877ed79fa5e
- SHA1 604ea9618b74832c03877f2106870cbd32023ee7
- SHA512 26b05eba80b319efa5876aa9369734089406a5dabfcd417264aa019b87cf43c7560e7c1346b19e113697dc84d5e14c64530326a86c9c559dacf8bb09ab606bdd
- SSDEEP 192:obOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwbkY04/CFxyNhoy5t/:obLwOs8AHsc4sMfwhKQLrobS4/CFsrd/
- TLSH T11E5308834BDE9CF2FB91117108794BB9927B99D4910EBEDFAF90CD150077292E83A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-26_a2ac22f02a2ffb02171f2877ed79fa5e_elex_wannacry.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_a2ac22f02a2ffb02171f2877ed79fa5e_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_a2ac22f02a2ffb02171f2877ed79fa5e_elex_wannacry
- Size 60KB
- SHA256 ab6f67ed41efdc5f2923252a599fe2c6d2d995196abcf09a77128d913dc2a2ab
- MD5 a2ac22f02a2ffb02171f2877ed79fa5e
- SHA1 604ea9618b74832c03877f2106870cbd32023ee7
- SHA512 26b05eba80b319efa5876aa9369734089406a5dabfcd417264aa019b87cf43c7560e7c1346b19e113697dc84d5e14c64530326a86c9c559dacf8bb09ab606bdd
- SSDEEP 192:obOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwbkY04/CFxyNhoy5t/:obLwOs8AHsc4sMfwhKQLrobS4/CFsrd/
- TLSH T11E5308834BDE9CF2FB91117108794BB9927B99D4910EBEDFAF90CD150077292E83A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Stormser aka Storm DDoS and StormAttack
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE