General
- Target 2026-11-01_f8255b56d1f7da959693dd3f8511f89b_elex_wannacry
- Size 60KB
- Sample261102-c2klfadh92
- SHA256 fe64553fb2f7b1239339928df9d57c5f8ce64d29d07cd4ba1f0e37fc1d441de3
- MD5 f8255b56d1f7da959693dd3f8511f89b
- SHA1 a44077c263f5ba8a276ca4112048c43f797ad90e
- SHA512 2aa74c9c1d55bbda4ea1e6c532e3088cb205eb5b0631df9eec0899d7a06c46184a7902a75a5f286190c669e89f75d9967e5ec81bde5603de5c36c077ec7a1349
- SSDEEP 192:pbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwUY04/CFxyNhoy5t:pbLwOs8AHsc4sMfwhKQLroi4/CFsrd
- TLSH T1125309834BEE5CF2F791113108798AB9927B99D4950EBEDFBF90CD150037292E53A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-01_f8255b56d1f7da959693dd3f8511f89b_elex_wannacry.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-01_f8255b56d1f7da959693dd3f8511f89b_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_f8255b56d1f7da959693dd3f8511f89b_elex_wannacry
- Size 60KB
- SHA256 fe64553fb2f7b1239339928df9d57c5f8ce64d29d07cd4ba1f0e37fc1d441de3
- MD5 f8255b56d1f7da959693dd3f8511f89b
- SHA1 a44077c263f5ba8a276ca4112048c43f797ad90e
- SHA512 2aa74c9c1d55bbda4ea1e6c532e3088cb205eb5b0631df9eec0899d7a06c46184a7902a75a5f286190c669e89f75d9967e5ec81bde5603de5c36c077ec7a1349
- SSDEEP 192:pbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwUY04/CFxyNhoy5t:pbLwOs8AHsc4sMfwhKQLroi4/CFsrd
- TLSH T1125309834BEE5CF2F791113108798AB9927B99D4950EBEDFBF90CD150037292E53A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE