General
- Target 2026-10-27_f7cc2b2b2a2e59b9438705a47f3522ed_elex_wannacry
- Size 89KB
- Sample261027-zypsbavv8q
- SHA256 3c6acc04bbb606602c2ed7afc244d7788ea64829013a060ac445fb5ae7c8f310
- MD5 f7cc2b2b2a2e59b9438705a47f3522ed
- SHA1 8c511beaec643c4ccc529b045c2c61b801b3b316
- SHA512 040b5cef517112719e6c29b7759996a5af62f3f4c1efe3204c9a1ce8590e2188da521ed71b8f3e91bd8b36f7163d3c399442d722e9d6b12eff4160178142777a
- SSDEEP 768:5vw9816thKQLro94/wQkNrfrunMxVFA3k:lEG/0o9lbunMxVS3k
- TLSH T18493712DCDFB30F6ED73D57589E125B2BA56ED4235091D0E4682C3426E22B42AF86C1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-27_f7cc2b2b2a2e59b9438705a47f3522ed_elex_wannacry.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-27_f7cc2b2b2a2e59b9438705a47f3522ed_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-27_f7cc2b2b2a2e59b9438705a47f3522ed_elex_wannacry
- Size 89KB
- SHA256 3c6acc04bbb606602c2ed7afc244d7788ea64829013a060ac445fb5ae7c8f310
- MD5 f7cc2b2b2a2e59b9438705a47f3522ed
- SHA1 8c511beaec643c4ccc529b045c2c61b801b3b316
- SHA512 040b5cef517112719e6c29b7759996a5af62f3f4c1efe3204c9a1ce8590e2188da521ed71b8f3e91bd8b36f7163d3c399442d722e9d6b12eff4160178142777a
- SSDEEP 768:5vw9816thKQLro94/wQkNrfrunMxVFA3k:lEG/0o9lbunMxVS3k
- TLSH T18493712DCDFB30F6ED73D57589E125B2BA56ED4235091D0E4682C3426E22B42AF86C1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE