General
- Target 2026-10-28_ca9e299d1cc66b7ba607433ee9eb801a_elex_wannacry
- Size 64KB
- Sample261029-w8llvsd15y
- SHA256 af6c6517337ee9b10c933dcf5f88213f227d2496e3fb2f4b141594777cf9328e
- MD5 ca9e299d1cc66b7ba607433ee9eb801a
- SHA1 c849a451b4e2426e33901e52dcf0204a344e4eed
- SHA512 f06170b896300c2793258fb8c7d2e33ddc95fc7e6b1e7af5fd2c7c6c904234d97d7b93bc679ecf26fc7f3b05832f4f60ada5901b0e64f31191b03b1a9e6c5d3c
- SSDEEP 192:ObOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwt5Y04/CFxyNhoy5tT:ObLwOs8AHsc4sMfwhKQLrotL4/CFsrdT
- TLSH T10953404B269944A3F94AB1B82CE44D7C61AF55C050296B7ED7E0EB272327DE1942F20F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-28_ca9e299d1cc66b7ba607433ee9eb801a_elex_wannacry.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-28_ca9e299d1cc66b7ba607433ee9eb801a_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-28_ca9e299d1cc66b7ba607433ee9eb801a_elex_wannacry
- Size 64KB
- SHA256 af6c6517337ee9b10c933dcf5f88213f227d2496e3fb2f4b141594777cf9328e
- MD5 ca9e299d1cc66b7ba607433ee9eb801a
- SHA1 c849a451b4e2426e33901e52dcf0204a344e4eed
- SHA512 f06170b896300c2793258fb8c7d2e33ddc95fc7e6b1e7af5fd2c7c6c904234d97d7b93bc679ecf26fc7f3b05832f4f60ada5901b0e64f31191b03b1a9e6c5d3c
- SSDEEP 192:ObOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwt5Y04/CFxyNhoy5tT:ObLwOs8AHsc4sMfwhKQLrotL4/CFsrdT
- TLSH T10953404B269944A3F94AB1B82CE44D7C61AF55C050296B7ED7E0EB272327DE1942F20F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Stormser aka Storm DDoS and StormAttack
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE