General
- Target 2026-11-03_38c641a80ec94cb7846cd97d0c3a9327_elex_wannacry
- Size 320KB
- Sample261104-3nplcav1cw
- SHA256 3c83de1fcb663eec3beab69002b5a1ca87c79fbee4ed50f97bf266a241ebebb7
- MD5 38c641a80ec94cb7846cd97d0c3a9327
- SHA1 f1587c6cc25488b15cebabf8a6c66e597cd37b0c
- SHA512 173788bf679da545c819328562f12f6f043bef1a88a5f61b5ba8deb18bbce17a66838cdc31ee0fd877cff6ad609139c27f3fd1fc0be35e14e7cfd69a38c6daf2
- SSDEEP 3072:fDEGh0oGlZdOe2MUVg3bHrH/HqOYGb+4QnZSe+rcC4F0fJGRIS8Rfd7eQEjMUy:bEG0lnOe2MUVg3vdeKcAEjy
- TLSH T1DD64A63D5FE6D5E5E0B38A704DB5C501A9BBBA5139318F1F00DA021E4C21AE1DDA6B3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-03_38c641a80ec94cb7846cd97d0c3a9327_elex_wannacry.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-03_38c641a80ec94cb7846cd97d0c3a9327_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-03_38c641a80ec94cb7846cd97d0c3a9327_elex_wannacry
- Size 320KB
- SHA256 3c83de1fcb663eec3beab69002b5a1ca87c79fbee4ed50f97bf266a241ebebb7
- MD5 38c641a80ec94cb7846cd97d0c3a9327
- SHA1 f1587c6cc25488b15cebabf8a6c66e597cd37b0c
- SHA512 173788bf679da545c819328562f12f6f043bef1a88a5f61b5ba8deb18bbce17a66838cdc31ee0fd877cff6ad609139c27f3fd1fc0be35e14e7cfd69a38c6daf2
- SSDEEP 3072:fDEGh0oGlZdOe2MUVg3bHrH/HqOYGb+4QnZSe+rcC4F0fJGRIS8Rfd7eQEjMUy:bEG0lnOe2MUVg3vdeKcAEjy
- TLSH T1DD64A63D5FE6D5E5E0B38A704DB5C501A9BBBA5139318F1F00DA021E4C21AE1DDA6B3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Stormser aka Storm DDoS and StormAttack
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE