General
- Target 2026-11-14_f35d44889398019ce0bb5d62e8266ef9_elex_wannacry
- Size 64KB
- Sample261114-2rd4cag12n
- SHA256 6f030ce3b7e07558d0c0267ed4ad05ed86ff1b9cce22fe671a2ff6416a84a3a0
- MD5 f35d44889398019ce0bb5d62e8266ef9
- SHA1 0c70dba93908a96678ad7ee47e09f6cbd496f7ca
- SHA512 fff226d501e09f6d21b54910946c844f31fb4cad18f1081abd97a02ad46d2f111884782a96bfc67e1bbe433394b552ac8ec50c8b49cab0568c377e07edffb271
- SSDEEP 192:ObOzawOs81elJHsc45gcRZOgtShcWaOT2QLrCqwEaY04/CFxyNhoy5tR:ObLwOs8AHsc4qMfwhKQLroh4/CFsrdR
- TLSH T1D15319834BDE5CF2F7A1113108785AB9927B99C4950DBEDFBF90CD154037A92E43A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-14_f35d44889398019ce0bb5d62e8266ef9_elex_wannacry.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-14_f35d44889398019ce0bb5d62e8266ef9_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-14_f35d44889398019ce0bb5d62e8266ef9_elex_wannacry
- Size 64KB
- SHA256 6f030ce3b7e07558d0c0267ed4ad05ed86ff1b9cce22fe671a2ff6416a84a3a0
- MD5 f35d44889398019ce0bb5d62e8266ef9
- SHA1 0c70dba93908a96678ad7ee47e09f6cbd496f7ca
- SHA512 fff226d501e09f6d21b54910946c844f31fb4cad18f1081abd97a02ad46d2f111884782a96bfc67e1bbe433394b552ac8ec50c8b49cab0568c377e07edffb271
- SSDEEP 192:ObOzawOs81elJHsc45gcRZOgtShcWaOT2QLrCqwEaY04/CFxyNhoy5tR:ObLwOs8AHsc4qMfwhKQLroh4/CFsrdR
- TLSH T1D15319834BDE5CF2F7A1113108785AB9927B99C4950DBEDFBF90CD154037A92E43A10B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Stormser aka Storm DDoS and StormAttack
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE