General
- Target 2026-10-28_41c439a94bc765ffa71a07904d9d6f78_elex_wannacry
- Size 64KB
- Sample261028-ptt65azz8m
- SHA256 ac4f68c2570a85d008be053bd4c005d355370335b649f95563301a31fc2b46ba
- MD5 41c439a94bc765ffa71a07904d9d6f78
- SHA1 64107f25a40bebeaaafdec637f9af38e9fd846f4
- SHA512 ec90ef07c2354cb2f9b4ba1227e61cb920bdf40ef0f1b5e94640b3c623d66eb100c521d78b9734eb94e9079b49dff51c1b14b85b60c681af8b62d94ce53c7cf2
- SSDEEP 192:VbOzawOs81elJHsc45ecRZOgtShcWaOT2QLrCqwuY04/CFxyNhoy5tF:VbLwOs8AHsc4QMfwhKQLroU4/CFsrdF
- TLSH T191533BE3C69BCAA3F6E0713B07644A745127958853896D9BEB4CF91E002BFD1B437286
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-28_41c439a94bc765ffa71a07904d9d6f78_elex_wannacry.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-28_41c439a94bc765ffa71a07904d9d6f78_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-28_41c439a94bc765ffa71a07904d9d6f78_elex_wannacry
- Size 64KB
- SHA256 ac4f68c2570a85d008be053bd4c005d355370335b649f95563301a31fc2b46ba
- MD5 41c439a94bc765ffa71a07904d9d6f78
- SHA1 64107f25a40bebeaaafdec637f9af38e9fd846f4
- SHA512 ec90ef07c2354cb2f9b4ba1227e61cb920bdf40ef0f1b5e94640b3c623d66eb100c521d78b9734eb94e9079b49dff51c1b14b85b60c681af8b62d94ce53c7cf2
- SSDEEP 192:VbOzawOs81elJHsc45ecRZOgtShcWaOT2QLrCqwuY04/CFxyNhoy5tF:VbLwOs8AHsc4QMfwhKQLroU4/CFsrdF
- TLSH T191533BE3C69BCAA3F6E0713B07644A745127958853896D9BEB4CF91E002BFD1B437286
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE