2026-10-28_04ded3aed3e9382a77336e1485a4613f_elex_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-28_04ded3aed3e9382a77336e1485a4613f_elex_wannacry
Size 12.6MB
Sample261030-necsvsyw4m
SHA256 69e19c02ef56f4c90cf21f2c3a8b7b813016b436be60ccca70ab2261fb4edfff
MD5 04ded3aed3e9382a77336e1485a4613f
SHA1 21b56bb1f65d59006f503a689306a39a832cc983
SHA512 1b0c95453ac9b67bd55befa4469d5d882b9cb32b50629962215426ba75961f6ca6ceb23c1162ee8fb8f2187f59dffae3679155b26e7a973918563cc78210ad1b
SSDEEP 393216:EdoW+CBKKy023CAb+iGCaz8r+TvUEMkTM:VesL0g45bHNM
TLSH
T1DED63387B283DCB5EDA917B3564523B4C076E9A480F18CB76B9CCC19B73CE19CC2525A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

2026-10-28_04ded3aed3e9382a77336e1485a4613f_elex_wannacry

.exe 12.6MB

2026-10-28_04ded3aed3e9382a77336e1485a4613f_elex_wannacry

IMPHASH 12f12d364f5f6a801e52c9dce28d1965
SHA256 69e19c02ef56f4c90cf21f2c3a8b7b813016b436be60ccca70ab2261fb4edfff
MD5 04ded3aed3e9382a77336e1485a4613f
SHA1 21b56bb1f65d59006f503a689306a39a832cc983
SHA512 1b0c95453ac9b67bd55befa4469d5d882b9cb32b50629962215426ba75961f6ca6ceb23c1162ee8fb8f2187f59dffae3679155b26e7a973918563cc78210ad1b
SSDEEP 393216:EdoW+CBKKy023CAb+iGCaz8r+TvUEMkTM:VesL0g45bHNM
TLSH
T1DED63387B283DCB5EDA917B3564523B4C076E9A480F18CB76B9CCC19B73CE19CC2525A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

4d:58:71:e2:d3:a7:d1:f4:97:7e:14:73:c1:5f:ab:33:2a:2b:76:7f:62:72:7b:04:9c:b7:1b:2e:de:49:17:c6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=705421,CN=Entrust Corporation,O=Entrust Corporation,L=Shakopee,ST=Minnesota,C=US,1.3.6.1.4.1.311.60.2.1.3=#13025553,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Sep 30, 2026

CN=SSL.com EV Code Signing Intermediate CA RSA R3,O=SSL Corp,L=Houston,ST=Texas,C=US

CN=SSL.com EV Root Certification Authority RSA R2,O=SSL Corporation,L=Houston,ST=Texas,C=US

Subject

CN=SSL.com EV Code Signing Intermediate CA RSA R3,O=SSL Corp,L=Houston,ST=Texas,C=US

Serial Number

42:4b:6a:53:ce:c7:66:14:1c:2a:63:b1:a5:1c:41:04

Issuer

CN=SSL.com EV Root Certification Authority RSA R2,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 26, 2019 - Mar 22, 2034

Subject

Serial Number

73:83:60:7d:d7:d0:06:95:8e:87:8a:05:7a:62:bb:90

Issuer

CN=SSL.com EV Code Signing Intermediate CA RSA R3,O=SSL Corp,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 8, 2025 - Dec 3, 2028

Subject

CN=SSL.com Timestamping Unit 2025 E1,O=SSL Corp,L=Houston,ST=Texas,C=US

Serial Number

1f:6b:16:62:d2:2e:1b:6c:5d:f1:c0:c1:a0:60:0e:38

Issuer

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Feb 18, 2025 - Nov 12, 2034

Subject

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Serial Number

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 13, 2019 - Nov 12, 2034

Minor OS version

Major OS version

Entry point

79676

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

oleaut32

VariantClear SysAllocString

user32

SendMessageA SetTimer KillTimer DialogBoxParamA SetWindowLongA GetWindowLongA SetWindowTextW SetWindowTextA LoadIconA LoadStringW LoadStringA CharUpperW CharUpperA DestroyWindow EndDialog PostMessageA ShowWindow MessageBoxW GetDlgItem DialogBoxParamW

shell32

ShellExecuteExA

msvcrt

_controlfp __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit _onexit __dllonexit ??1type_info@@UAE@XZ _except_handler3 _beginthreadex memcpy free malloc _CxxThrowException _purecall memmove __CxxFrameHandler memcmp

kernel32

GetCommandLineW GetStartupInfoA GetModuleHandleA InitializeCriticalSection ResetEvent SetEvent CreateEventA VirtualFree VirtualAlloc Sleep WaitForMultipleObjects GetStdHandle SetEndOfFile WriteFile ReadFile SetFilePointer GetFileSize CreateFileA FindNextFileA FindFirstFileW FindFirstFileA FindClose GetTempFileNameA GetTempPathA GetCurrentDirectoryA GetFullPathNameW GetFullPathNameA lstrlenA DeleteFileW DeleteFileA CreateDirectoryW CreateDirectoryA RemoveDirectoryW SetFileAttributesW RemoveDirectoryA SetFileAttributesA SetLastError CreateFileW SetFileTime GetWindowsDirectoryA FormatMessageW FormatMessageA LocalFree GetModuleFileNameW GetModuleFileNameA AreFileApisANSI GetLastError WideCharToMultiByte MultiByteToWideChar DeleteCriticalSection WaitForSingleObject CloseHandle CreateProcessA SetCurrentDirectoryA GetVersionExA LeaveCriticalSection EnterCriticalSection

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-28_04ded3aed3e9382a77336e1485a4613f_elex_wannacry

oleaut32

user32

shell32

msvcrt

kernel32

generic