General
- Target 2026-10-28_36c39fc2556c256586c78b31b0cf79e2_elex_wannacry
- Size 68KB
- Sample261028-a7hb6ahs3x
- SHA256 200322aacd6ca41823629a16a68afe750458725a1e6802040162fc4c8b701b25
- MD5 36c39fc2556c256586c78b31b0cf79e2
- SHA1 c86527c79c6d1d2e62a5a48f9465cc421b79f70e
- SHA512 f75668fb302e90e24d84528e18243899884c563a97ddaac8d04c1d326fb7c7d8aafb20a9b9b75006869c56ddf5076de52baea7044e794dc72b40c236e62f4b3c
- SSDEEP 192:ebOzawOs81elJHsc45CcRZOOtShcWaOT2QLrCqwbY04/CFxyNhoy5t:ebLwOs8AHsc4sMlwhKQLrod4/CFsrd
- TLSH T1F163B443CBBB78F2FE9311310CE94AB5926BDDC49109BE9B6B50C9153326352D72AD0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-28_36c39fc2556c256586c78b31b0cf79e2_elex_wannacry.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-28_36c39fc2556c256586c78b31b0cf79e2_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-28_36c39fc2556c256586c78b31b0cf79e2_elex_wannacry
- Size 68KB
- SHA256 200322aacd6ca41823629a16a68afe750458725a1e6802040162fc4c8b701b25
- MD5 36c39fc2556c256586c78b31b0cf79e2
- SHA1 c86527c79c6d1d2e62a5a48f9465cc421b79f70e
- SHA512 f75668fb302e90e24d84528e18243899884c563a97ddaac8d04c1d326fb7c7d8aafb20a9b9b75006869c56ddf5076de52baea7044e794dc72b40c236e62f4b3c
- SSDEEP 192:ebOzawOs81elJHsc45CcRZOOtShcWaOT2QLrCqwbY04/CFxyNhoy5t:ebLwOs8AHsc4sMlwhKQLrod4/CFsrd
- TLSH T1F163B443CBBB78F2FE9311310CE94AB5926BDDC49109BE9B6B50C9153326352D72AD0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Stormser aka Storm DDoS and StormAttack
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE