General
- Target 2026-11-06_ff4c455f3da6b496ec07b1af8d889967_elex_wannacry
- Size 76KB
- Sample261107-v63xpafe37
- SHA256 1c79cfeeda4c5ca1b5d2179f65883c0e80837b1cdaf7d994b165147af5999ac7
- MD5 ff4c455f3da6b496ec07b1af8d889967
- SHA1 9bd6ad44d3395820bad21320a970b20f5625c177
- SHA512 6f9c75400c4b6709c9c248c803ed8b20f4aa97b8aa33e84e885cb763cca82fcbadf748d45e89239552e3bfe30f04f1d43878aaa07ea591d255df5ed5a28f6aaa
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLroG4/CFsrdOI1Nb7g7FX7XYfruVDtM9tQ/FKlnVwU1:vvw9816vhKQLroG4/wQRNrfrunMxVD
- TLSH T1E373823E5EDA1037E1B3D2B585F16AE7FE26B98239091D0E46D643418D23B53BC8AC1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-06_ff4c455f3da6b496ec07b1af8d889967_elex_wannacry.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-06_ff4c455f3da6b496ec07b1af8d889967_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-06_ff4c455f3da6b496ec07b1af8d889967_elex_wannacry
- Size 76KB
- SHA256 1c79cfeeda4c5ca1b5d2179f65883c0e80837b1cdaf7d994b165147af5999ac7
- MD5 ff4c455f3da6b496ec07b1af8d889967
- SHA1 9bd6ad44d3395820bad21320a970b20f5625c177
- SHA512 6f9c75400c4b6709c9c248c803ed8b20f4aa97b8aa33e84e885cb763cca82fcbadf748d45e89239552e3bfe30f04f1d43878aaa07ea591d255df5ed5a28f6aaa
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLroG4/CFsrdOI1Nb7g7FX7XYfruVDtM9tQ/FKlnVwU1:vvw9816vhKQLroG4/wQRNrfrunMxVD
- TLSH T1E373823E5EDA1037E1B3D2B585F16AE7FE26B98239091D0E46D643418D23B53BC8AC1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Stormser aka Storm DDoS and StormAttack
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE