General
- Target 2026-11-10_dfe2c9cd0830100890994dd653609198_elex_wannacry
- Size 76KB
- Sample261111-v73nbaat4m
- SHA256 86a408f6a9eb54baa7497ea7ae4382b090d32d127079af9e720f842d021534f3
- MD5 dfe2c9cd0830100890994dd653609198
- SHA1 63afca9e93e5897a9fc33ae86d42db712d79bd8e
- SHA512 066f3d413e6fd97e04641a4ee4593f8199f9bbcf7d7e0d1d62dc90804ab16e0d61a81f4c1127c9e444f8b2ca3dcfa1eed6741a813119d1bd24927b00ded43c0c
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLrov4/CFsrdOI1Nb7g7FX7XYfruVDtM9tQ/FKlnVwU1:vvw9816vhKQLrov4/wQRNrfrunMxVD
- TLSH T1D173823E5EDA1037E1B3D2B585F16AE7FE26B98239091D0E46D643418D23B53BC8AC1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-10_dfe2c9cd0830100890994dd653609198_elex_wannacry.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-10_dfe2c9cd0830100890994dd653609198_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-10_dfe2c9cd0830100890994dd653609198_elex_wannacry
- Size 76KB
- SHA256 86a408f6a9eb54baa7497ea7ae4382b090d32d127079af9e720f842d021534f3
- MD5 dfe2c9cd0830100890994dd653609198
- SHA1 63afca9e93e5897a9fc33ae86d42db712d79bd8e
- SHA512 066f3d413e6fd97e04641a4ee4593f8199f9bbcf7d7e0d1d62dc90804ab16e0d61a81f4c1127c9e444f8b2ca3dcfa1eed6741a813119d1bd24927b00ded43c0c
- SSDEEP 384:vbLwOs8AHsc4sMfwhKQLrov4/CFsrdOI1Nb7g7FX7XYfruVDtM9tQ/FKlnVwU1:vvw9816vhKQLrov4/wQRNrfrunMxVD
- TLSH T1D173823E5EDA1037E1B3D2B585F16AE7FE26B98239091D0E46D643418D23B53BC8AC1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Stormser aka Storm DDoS and StormAttack
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE