General
- Target 2026-11-02_38b8501d0da3a30fcb8fdca58b46c119_elex_wannacry
- Size 76KB
- Sample261103-pavcsahs4w
- SHA256 bcb4b1e0844d8f49f55c76a9c5109c8c3784c1f2bf4d98dcb6ba820b6becf6c1
- MD5 38b8501d0da3a30fcb8fdca58b46c119
- SHA1 2ddfe19118f6814862ddaf1ddd6921e590d0e81b
- SHA512 963883acea80e53e8a094c6568f5a9297a47018aca7592a5213607b25d56b57ce956e0847ec27a194a64dcea8d8bddde3909473349f3a95d2562c960fe09c09e
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLros4/CFsrdOI1Nb7g7FX7XYfruVDtM9tQ/FKlnVwU1:vvw9816vhKQLros4/wQRNrfrunMxVD
- TLSH T1F473823E5EDA1037E1B3D2B585F16AE7FE26B98239091D0E46D643418D23B53BC8AC1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-02_38b8501d0da3a30fcb8fdca58b46c119_elex_wannacry.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-02_38b8501d0da3a30fcb8fdca58b46c119_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-02_38b8501d0da3a30fcb8fdca58b46c119_elex_wannacry
- Size 76KB
- SHA256 bcb4b1e0844d8f49f55c76a9c5109c8c3784c1f2bf4d98dcb6ba820b6becf6c1
- MD5 38b8501d0da3a30fcb8fdca58b46c119
- SHA1 2ddfe19118f6814862ddaf1ddd6921e590d0e81b
- SHA512 963883acea80e53e8a094c6568f5a9297a47018aca7592a5213607b25d56b57ce956e0847ec27a194a64dcea8d8bddde3909473349f3a95d2562c960fe09c09e
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLros4/CFsrdOI1Nb7g7FX7XYfruVDtM9tQ/FKlnVwU1:vvw9816vhKQLros4/wQRNrfrunMxVD
- TLSH T1F473823E5EDA1037E1B3D2B585F16AE7FE26B98239091D0E46D643418D23B53BC8AC1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stormser aka Storm DDoS and StormAttack
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE