General
- Target 2026-11-02_dfa9c948de3e4d9a4944ea624a6ad863_elex_wannacry
- Size 59KB
- Sample261102-zcbcssgc65
- SHA256 826716c8f2cb289c184ebe4994b59f394b80ca59f3a11502b03add427d26ec64
- MD5 dfa9c948de3e4d9a4944ea624a6ad863
- SHA1 512802afface212dc03727c85abd234f95a2ad32
- SHA512 a52e29d2f06d2bc08f83a14ee99b72449e27f45754a2902f2647b6ff45975f7770f15c4d22c2887342837f40ae2d72302c368145c89ea288cb1d29ec7a0bc2da
- SSDEEP 384:MbLwOs8AHsc4sMfwhKQLrojXP3R4/CFsrcGIiXY1nhbHQn:Mvw9816vhKQLrojXfR4/wQDIi4dHQ
- TLSH T17A436C830FE948F2F7911171057D5BB9627BAAC0D209BEDB7F80DE28117B242E53E14A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-02_dfa9c948de3e4d9a4944ea624a6ad863_elex_wannacry.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-02_dfa9c948de3e4d9a4944ea624a6ad863_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-02_dfa9c948de3e4d9a4944ea624a6ad863_elex_wannacry
- Size 59KB
- SHA256 826716c8f2cb289c184ebe4994b59f394b80ca59f3a11502b03add427d26ec64
- MD5 dfa9c948de3e4d9a4944ea624a6ad863
- SHA1 512802afface212dc03727c85abd234f95a2ad32
- SHA512 a52e29d2f06d2bc08f83a14ee99b72449e27f45754a2902f2647b6ff45975f7770f15c4d22c2887342837f40ae2d72302c368145c89ea288cb1d29ec7a0bc2da
- SSDEEP 384:MbLwOs8AHsc4sMfwhKQLrojXP3R4/CFsrcGIiXY1nhbHQn:Mvw9816vhKQLrojXfR4/wQDIi4dHQ
- TLSH T17A436C830FE948F2F7911171057D5BB9627BAAC0D209BEDB7F80DE28117B242E53E14A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE