General
- Target 2026-10-28_8b8be44f02b05084bef8a4c26d157e27_elex_wannacry
- Size 64KB
- Sample261030-abpflag18n
- SHA256 9e7fd1605b369cb47619c3705a5d71e6d5a1b57ae9253bb957a4bddd3d9c3232
- MD5 8b8be44f02b05084bef8a4c26d157e27
- SHA1 857cffc5891c0e4bfb1b68810ecbce3b1487e059
- SHA512 cc9d8cda9d2ea44b808b13683647734c126f49632509f3feb612a8002168b03c581a041ef6e559da33b98710409bc0c70be444aa8da2f4778e674a7c716a3186
- SSDEEP 192:VbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqw8Y04/CFxyNhoy5tT:VbLwOs8AHsc4sMfwhKQLroK4/CFsrdT
- TLSH T11553414A269544A3F94EB1B82CE44D7C61AF55C040296B7AD7E0EB232327DE1D42F20F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-28_8b8be44f02b05084bef8a4c26d157e27_elex_wannacry.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-28_8b8be44f02b05084bef8a4c26d157e27_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-28_8b8be44f02b05084bef8a4c26d157e27_elex_wannacry
- Size 64KB
- SHA256 9e7fd1605b369cb47619c3705a5d71e6d5a1b57ae9253bb957a4bddd3d9c3232
- MD5 8b8be44f02b05084bef8a4c26d157e27
- SHA1 857cffc5891c0e4bfb1b68810ecbce3b1487e059
- SHA512 cc9d8cda9d2ea44b808b13683647734c126f49632509f3feb612a8002168b03c581a041ef6e559da33b98710409bc0c70be444aa8da2f4778e674a7c716a3186
- SSDEEP 192:VbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqw8Y04/CFxyNhoy5tT:VbLwOs8AHsc4sMfwhKQLroK4/CFsrdT
- TLSH T11553414A269544A3F94EB1B82CE44D7C61AF55C040296B7AD7E0EB232327DE1D42F20F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE