General
- Target 2026-11-10_7b23261c55c8699aeb941704a1f8f4b9_elex_wannacry
- Size 76KB
- Sample261110-hs86bszzew
- SHA256 6cff17c9b06769cfd27d8cb6a1a922efcb981ea99f202e93b4be774361b13f29
- MD5 7b23261c55c8699aeb941704a1f8f4b9
- SHA1 6eb5b1c663892dc42dab286b753e83915e46fe4f
- SHA512 1732d4540a3a57d4bbedaa1545a5d13efb124586d6d7ed72dc9033cef05526b16931527bf0af19eb763f68adb7492c60a0d973c58daf99085e481d3c4b06c7db
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLro94/CFsrdOI1Nb7g7FX7XYfruVDtM9tQ/FKlnVwU1:vvw9816vhKQLro94/wQRNrfrunMxVD
- TLSH T17873823E5EDA1037E1B3D2B585F16AE7FE26B98239091D0E46D643418D23B53BC8AC1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-10_7b23261c55c8699aeb941704a1f8f4b9_elex_wannacry.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-10_7b23261c55c8699aeb941704a1f8f4b9_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-10_7b23261c55c8699aeb941704a1f8f4b9_elex_wannacry
- Size 76KB
- SHA256 6cff17c9b06769cfd27d8cb6a1a922efcb981ea99f202e93b4be774361b13f29
- MD5 7b23261c55c8699aeb941704a1f8f4b9
- SHA1 6eb5b1c663892dc42dab286b753e83915e46fe4f
- SHA512 1732d4540a3a57d4bbedaa1545a5d13efb124586d6d7ed72dc9033cef05526b16931527bf0af19eb763f68adb7492c60a0d973c58daf99085e481d3c4b06c7db
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLro94/CFsrdOI1Nb7g7FX7XYfruVDtM9tQ/FKlnVwU1:vvw9816vhKQLro94/wQRNrfrunMxVD
- TLSH T17873823E5EDA1037E1B3D2B585F16AE7FE26B98239091D0E46D643418D23B53BC8AC1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Stormser aka Storm DDoS and StormAttack
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE