General
- Target 2026-11-06_d47b145786f592085b3963d6d5a501c3_elex_wannacry
- Size 60KB
- Sample261107-175essfx9t
- SHA256 f62da236df30a67a298e9612efba5b36b2ab5512e442b1b32338625c59b1630c
- MD5 d47b145786f592085b3963d6d5a501c3
- SHA1 6fa741bc4e3e332ec6b25b3358d0f0f5a7d6d361
- SHA512 05d6254a76683fe8a451d162d5c7232ae5911a0be7b1f07b8de4845339aba241aed215a5cd18a83504f2e29147243858bb8ed75eabff37b802cf219bfdb4c91d
- SSDEEP 192:pbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwD9Y04/CFxyNhoy5t:pbLwOs8AHsc4sMfwhKQLroDv4/CFsrd
- TLSH T17E53F8834BDE5CF2F791123108798AB9927BA9D4950EBEDFBF90CD154037292E53A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-06_d47b145786f592085b3963d6d5a501c3_elex_wannacry.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-06_d47b145786f592085b3963d6d5a501c3_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-06_d47b145786f592085b3963d6d5a501c3_elex_wannacry
- Size 60KB
- SHA256 f62da236df30a67a298e9612efba5b36b2ab5512e442b1b32338625c59b1630c
- MD5 d47b145786f592085b3963d6d5a501c3
- SHA1 6fa741bc4e3e332ec6b25b3358d0f0f5a7d6d361
- SHA512 05d6254a76683fe8a451d162d5c7232ae5911a0be7b1f07b8de4845339aba241aed215a5cd18a83504f2e29147243858bb8ed75eabff37b802cf219bfdb4c91d
- SSDEEP 192:pbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwD9Y04/CFxyNhoy5t:pbLwOs8AHsc4sMfwhKQLroDv4/CFsrd
- TLSH T17E53F8834BDE5CF2F791123108798AB9927BA9D4950EBEDFBF90CD154037292E53A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Stormser aka Storm DDoS and StormAttack
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE