General
- Target 2026-11-05_db0900a316948af40f28ef1b25ae521d_elex_phorpiex_wannacry
- Size 9KB
- Sample261106-hs3csahx6v
- SHA256 7cb6efec88171ad50acaea34c41e4c24d6091be318372221721b57014f3612d4
- MD5 db0900a316948af40f28ef1b25ae521d
- SHA1 0e85cb6c615f78e6269935190a6514d4332fdf9e
- SHA512 47a3bcb64b4fdb52ef8787cc1b7fd91b1a52bd2e33d9f4833daaa1056e8ca0088f39acb06fc91115736f27ac8a294ceb6aeb65d7a3c9fabbe815c638fcb7d823
- SSDEEP 96:0JJxTjuBdVZtHJiOVKnb0C8Z8yPtboynukdGCtZC9tYumHVNHHczK1voLaGR4:0BAfZtHDcnWZ8yP1oynTdhStzWNnaKu
- TLSH T12012D505A7618763F15901B94B675EBA413814313B49DDFFF795032825A0EE8F83275B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-05_db0900a316948af40f28ef1b25ae521d_elex_phorpiex_wannacry.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-05_db0900a316948af40f28ef1b25ae521d_elex_phorpiex_wannacry.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
phorphiex
C2
-
185.176.27.132
-
https://download.microsoft.com
Targets
-
- Target 2026-11-05_db0900a316948af40f28ef1b25ae521d_elex_phorpiex_wannacry
- Size 9KB
- SHA256 7cb6efec88171ad50acaea34c41e4c24d6091be318372221721b57014f3612d4
- MD5 db0900a316948af40f28ef1b25ae521d
- SHA1 0e85cb6c615f78e6269935190a6514d4332fdf9e
- SHA512 47a3bcb64b4fdb52ef8787cc1b7fd91b1a52bd2e33d9f4833daaa1056e8ca0088f39acb06fc91115736f27ac8a294ceb6aeb65d7a3c9fabbe815c638fcb7d823
- SSDEEP 96:0JJxTjuBdVZtHJiOVKnb0C8Z8yPtboynukdGCtZC9tYumHVNHHczK1voLaGR4:0BAfZtHDcnWZ8yP1oynTdhStzWNnaKu
- TLSH T12012D505A7618763F15901B94B675EBA413814313B49DDFFF795032825A0EE8F83275B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL