General
- Target 2026-10-26_56957fd2f50243c03e3426a912a2937e_elex_wannacry
- Size 60KB
- Sample261027-vj468sts7k
- SHA256 64904b84df0e2e7e5d7f062a8f9433a9ca15126cf891c4f7045a2df248eb42f5
- MD5 56957fd2f50243c03e3426a912a2937e
- SHA1 a8e6cbc53b46afed97c2fdeb92cc952b9f8eeb46
- SHA512 5c2462cce41cce643c99714711f34852979cdb6ea6d2e57d32c8c20394acd46c650d6e9bd69e64de77e8ab90e27a63936d998fc2e4e665eeb03a66f44320639f
- SSDEEP 192:pbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqw6Y04/CFxyNhoy5t:pbLwOs8AHsc4sMfwhKQLrow4/CFsrd
- TLSH T1865308834BEE5CF2F791123108798AB9927B99D4950EBEDFBB90CD154037292E53E10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-26_56957fd2f50243c03e3426a912a2937e_elex_wannacry.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_56957fd2f50243c03e3426a912a2937e_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_56957fd2f50243c03e3426a912a2937e_elex_wannacry
- Size 60KB
- SHA256 64904b84df0e2e7e5d7f062a8f9433a9ca15126cf891c4f7045a2df248eb42f5
- MD5 56957fd2f50243c03e3426a912a2937e
- SHA1 a8e6cbc53b46afed97c2fdeb92cc952b9f8eeb46
- SHA512 5c2462cce41cce643c99714711f34852979cdb6ea6d2e57d32c8c20394acd46c650d6e9bd69e64de77e8ab90e27a63936d998fc2e4e665eeb03a66f44320639f
- SSDEEP 192:pbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqw6Y04/CFxyNhoy5t:pbLwOs8AHsc4sMfwhKQLrow4/CFsrd
- TLSH T1865308834BEE5CF2F791123108798AB9927B99D4950EBEDFBB90CD154037292E53E10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE