General
- Target 2026-11-09_1edf4df677d7d6ec8e65ee808b2b1d53_elex_wannacry
- Size 60KB
- Sample261111-b2h7yadc95
- SHA256 cc4e280618501d47950e650c57df0e4cdd6d4f0fbddde46664f1c0606d87b2d2
- MD5 1edf4df677d7d6ec8e65ee808b2b1d53
- SHA1 064176da9ee2efc4121b7b4b76446327471f8d20
- SHA512 21cc70ac1d4efdb78e31d4e66faf48439c00a4d529fb903ec032b19876a1b18b5eb614c12936cddd3d61345db761a525ca2315f7600d5bea8f0ebee568e67b45
- SSDEEP 192:pbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwE7Y04/CFxyNhoy5t:pbLwOs8AHsc4sMfwhKQLros4/CFsrd
- TLSH T1E65308834BEE9CF2F691117108798BB9927B99C4950EBEDFBB90CD150037292E53A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-09_1edf4df677d7d6ec8e65ee808b2b1d53_elex_wannacry.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-09_1edf4df677d7d6ec8e65ee808b2b1d53_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-09_1edf4df677d7d6ec8e65ee808b2b1d53_elex_wannacry
- Size 60KB
- SHA256 cc4e280618501d47950e650c57df0e4cdd6d4f0fbddde46664f1c0606d87b2d2
- MD5 1edf4df677d7d6ec8e65ee808b2b1d53
- SHA1 064176da9ee2efc4121b7b4b76446327471f8d20
- SHA512 21cc70ac1d4efdb78e31d4e66faf48439c00a4d529fb903ec032b19876a1b18b5eb614c12936cddd3d61345db761a525ca2315f7600d5bea8f0ebee568e67b45
- SSDEEP 192:pbOzawOs81elJHsc45CcRZOgtShcWaOT2QLrCqwE7Y04/CFxyNhoy5t:pbLwOs8AHsc4sMfwhKQLros4/CFsrd
- TLSH T1E65308834BEE9CF2F691117108798BB9927B99C4950EBEDFBB90CD150037292E53A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Stormser aka Storm DDoS and StormAttack
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE