General
- Target 2026-10-28_ce32412516c5986a145558eb7e648d86_elex_wannacry
- Size 21KB
- Sample261028-hsc3wsav2w
- SHA256 11832e86f8915f56783454db00468cd8072d1efd8d32afb193b0ce86ce9b248b
- MD5 ce32412516c5986a145558eb7e648d86
- SHA1 34eaa42e092de053fb44dff58e2595f965134800
- SHA512 171ef8eaebca36ffba208fab9562511013ea7a07aa804ba911a83bdbd4dfe6d40c4a08918cd779fbc8508347d683a2f8c0ae598cdf20936afb9cb0326a340ed9
- SSDEEP 384:uTQWckBeEd6ml1pcg7F3Gi+CW6HWYyieTcibz+T4/:uxckEEd62J7F3Gig6H1ibz+M/
- TLSH T1E2A220386ED51D73E3BBD7B685F7C2C6B934B0277A03591E80861B851823B129DA1E8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-28_ce32412516c5986a145558eb7e648d86_elex_wannacry.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-28_ce32412516c5986a145558eb7e648d86_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-28_ce32412516c5986a145558eb7e648d86_elex_wannacry
- Size 21KB
- SHA256 11832e86f8915f56783454db00468cd8072d1efd8d32afb193b0ce86ce9b248b
- MD5 ce32412516c5986a145558eb7e648d86
- SHA1 34eaa42e092de053fb44dff58e2595f965134800
- SHA512 171ef8eaebca36ffba208fab9562511013ea7a07aa804ba911a83bdbd4dfe6d40c4a08918cd779fbc8508347d683a2f8c0ae598cdf20936afb9cb0326a340ed9
- SSDEEP 384:uTQWckBeEd6ml1pcg7F3Gi+CW6HWYyieTcibz+T4/:uxckEEd62J7F3Gig6H1ibz+M/
- TLSH T1E2A220386ED51D73E3BBD7B685F7C2C6B934B0277A03591E80861B851823B129DA1E8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Waski payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE