General

  • Target
    2026-11-01_bfce9e0177cc3fdac3dc885c8fec7e9e_elex_wannacry
  • Size 1.1MB
  • Sample261102-lwsvassvdv
  • SHA256 1cf47e2f2208f29b3844da71a1e0fe74c4c3960d5bb5d6c0d4940fd65c79ea30
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-11-01_bfce9e0177cc3fdac3dc885c8fec7e9e_elex_wannacry
    • Size 1.1MB
    • SHA256 1cf47e2f2208f29b3844da71a1e0fe74c4c3960d5bb5d6c0d4940fd65c79ea30
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Modifies firewall policy service

    • Adds policy Run key to start application

    • Executes a file named after a Windows system binary

      The file runs from a user directory while carrying the name of an executable that normally only exists in System32.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks