General
- Target 2026-11-01_e9a51c91100ea1dfc9c3f55362bb7089_elex_wannacry
- Size 629KB
- Sample261102-e8q3xaey9x
- SHA256 9108a2858ca0d45d6bb56881bf12a07a91daac2d4c5fbff5ec0855350ddcf43a
- MD5 e9a51c91100ea1dfc9c3f55362bb7089
- SHA1 21eb48a1ae11001326ee0c8a710d1109d05258f2
- SHA512 c771dc27dc75b1d743e7a98807d95517a19157d6dfaeb0845e31a3a24b696b5cf6eb4a65fd8498a31b425ef4a42f89e0cae35d3bd281d5adfa3b36f224e1e86b
- SSDEEP 6144:U4sZBOZdjEYTPXMhaMP/kFTA7OAtBOZdjEYF:UnANL8oq/kFTsODNF
- TLSH T1BCD41D3406718E04D463C3B42C950D955D6A1EF8CDF86796C707A0AE29BD7FA32AD3AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-01_e9a51c91100ea1dfc9c3f55362bb7089_elex_wannacry.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-01_e9a51c91100ea1dfc9c3f55362bb7089_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_e9a51c91100ea1dfc9c3f55362bb7089_elex_wannacry
- Size 629KB
- SHA256 9108a2858ca0d45d6bb56881bf12a07a91daac2d4c5fbff5ec0855350ddcf43a
- MD5 e9a51c91100ea1dfc9c3f55362bb7089
- SHA1 21eb48a1ae11001326ee0c8a710d1109d05258f2
- SHA512 c771dc27dc75b1d743e7a98807d95517a19157d6dfaeb0845e31a3a24b696b5cf6eb4a65fd8498a31b425ef4a42f89e0cae35d3bd281d5adfa3b36f224e1e86b
- SSDEEP 6144:U4sZBOZdjEYTPXMhaMP/kFTA7OAtBOZdjEYF:UnANL8oq/kFTsODNF
- TLSH T1BCD41D3406718E04D463C3B42C950D955D6A1EF8CDF86796C707A0AE29BD7FA32AD3AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory