General
- Target 2026-10-26_4df854dbbf3f9e8e683a040f7a86e261_elex_wannacry
- Size 60KB
- Sample261027-wfwalaez8t
- SHA256 c444fa15c59d6760b4343b183c1266080c962546df49543d3f24e02dee5ffa58
- MD5 4df854dbbf3f9e8e683a040f7a86e261
- SHA1 e3c8b74fa3e6d05f276f6f3a5b883de9ee6a2c82
- SHA512 83964678a46fde29b5a9fa4802ab9975e427bb236e8d0463307dc41f3c67322f152fc17e7a52aa781ff474600aa9fc7de7a1a8c4145c839eb9144b611772fa78
- SSDEEP 192:obOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwB5Y04/CFxyNhoy5t/:obLwOs8AHsc4sMfwhKQLroBL4/CFsrd/
- TLSH T12D5308834BDE9CF2F791117108798BB9927B99D4950EBEDFAF90CD550037292E83A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-26_4df854dbbf3f9e8e683a040f7a86e261_elex_wannacry.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_4df854dbbf3f9e8e683a040f7a86e261_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_4df854dbbf3f9e8e683a040f7a86e261_elex_wannacry
- Size 60KB
- SHA256 c444fa15c59d6760b4343b183c1266080c962546df49543d3f24e02dee5ffa58
- MD5 4df854dbbf3f9e8e683a040f7a86e261
- SHA1 e3c8b74fa3e6d05f276f6f3a5b883de9ee6a2c82
- SHA512 83964678a46fde29b5a9fa4802ab9975e427bb236e8d0463307dc41f3c67322f152fc17e7a52aa781ff474600aa9fc7de7a1a8c4145c839eb9144b611772fa78
- SSDEEP 192:obOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwB5Y04/CFxyNhoy5t/:obLwOs8AHsc4sMfwhKQLroBL4/CFsrd/
- TLSH T12D5308834BDE9CF2F791117108798BB9927B99D4950EBEDFAF90CD550037292E83A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE