2026-10-17_d0a082fb6dba0a7b08ba136b09b873ba_elex_wannacry
Classification: Malicious
2026-10-17_d0a082fb6dba0a7b08ba136b09b873ba_elex_wannacry is a trojan. Detected by 65 antivirus engines. Reported by 2 threat sources, last seen 2026-10-18.
Detection summary
- 65 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Stormser |
Triage |
2026-10-18 05:16:49 |
2026-10-18 05:16:49 |
malicious-activity
|
|
| StormDDOS |
Cyber Threat Alliance |
2026-10-16 06:48:08 |
2026-10-16 06:48:08 |
malicious-activity
|
|
Tags
stormser
discovery
execution
persistence
worm
Sample information
- Filenames
- 2026-10-17_d0a082fb6dba0a7b08ba136b09b873ba_elex_wannacry
- SHA-256
b257ce9616b1532157bd59f9cfa849935dcad4dd2e79858fa66526d8466633e6- First indexed
- 2026-10-16 06:48:08
- Last updated
- 2026-10-16 06:48:08
Antivirus detections
| Engine | Detection |
|---|
| ALYac | Trojan.Rincux.AW |
| APEX | Malicious |
| AVG | Win32:Dropper-OYD [Drp] |
| Acronis | suspicious |
| AhnLab-V3 | Trojan/Win.StormAttack.92820 |
| Antiy-AVL | Trojan[DDoS]/Win32.StormAttack |
| Arcabit | Trojan.Rincux.AW |
| Avast | Win32:Dropper-OYD [Drp] |
| Avira | TR/Dropper.Gen |
| BitDefender | Trojan.Rincux.AW |
| Bkav | W32.Malware.43A6D62E |
| CAT-QuickHeal | PUA.StormserRI.S28491914 |
| CTX | exe.trojan.rincux |
| ClamAV | Win.Malware.Ulise-9951851-0 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | DDoS.Storm.156 |
| ESET-NOD32 | Win32/TrojanDropper.Agent.PIH trojan |
| Elastic | malicious (high confidence) |
| Emsisoft | Trojan.Rincux.AW (B) |
| F-Secure | Trojan.TR/Dropper.Gen |
| Fortinet | W32/ServStart.AS!tr |
| GData | Win32.Trojan.PSE.11FOXOM |
| Google | Detected |
| Gridinsoft | Trojan.Win32.Agent.oa!s1 |
| Ikarus | Trojan-Downloader.Win32.Pangu |
| Jiangmin | TrojanDDoS.StormAttack.a |
| K7AntiVirus | Trojan ( 005b1a971 ) |
| K7GW | Trojan ( 00073eb11 ) |
| Kaspersky | Trojan-DDoS.Win32.StormAttack.a |
| Kingsoft | malware.kb.a.996 |
| Lionic | Trojan.Win32.StormAttack.lA5J |
| Malwarebytes | DDoSTool.Storm |
| MaxSecure | Trojan.DDoS.StormAttack.a |
| McAfeeD | Real Protect-LS!D0A082FB6DBA |
| MicroWorld-eScan | Trojan.Rincux.AW |
| Microsoft | Trojan:Win32/StormAttack.A!MTB |
| NANO-Antivirus | Trojan.Win32.StormAttack.fnqayj |
| Panda | Trj/Genetic.gen |
| Rising | Dropper.Agent!1.C6A3 (CLASSIC) |
| SUPERAntiSpyware | Trojan.Agent/Gen-Crypt |
| Sangfor | Trojan.Win32.Save.a |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | BehavesLike.Win32.Generic.nz |
| Sophos | Troj/Agent-BIXD |
| Symantec | Backdoor.Trojan |
| TACHYON | Trojan/W32.StormAttack.92820.B |
| Tencent | Trojan-Ddos.Win32.Stormattack.wa |
| Trapmine | malicious.high.ml.score |
| TrellixENS | GenericRXHD-CI!D0A082FB6DBA |
| TrendMicro | Trojan.Win32.STORMER.SMTPTVLNT |
| TrendMicro-HouseCall | Trojan.Win32.STORMER.SMTPTVLNT |
| VBA32 | BScope.TrojanDDoS.StormAttack |
| VIPRE | Trojan.Rincux.AW |
| Varist | W32/StormAttack.B.gen!Eldorado |
| ViRobot | Trojan.Win32.Agent.61440.JD |
| VirIT | Trojan.Win32.Storm.GA |
| Webroot | W32.Trojan.Gen |
| Xcitium | TrojWare.Win32.Magania.~AAC@f80ur |
| Yandex | Trojan.GenAsa!WGvR5YnH2mQ |
| ZoneAlarm | Troj/Agent-BIXD |
| alibabacloud | DDoS:Win/Stormser |
| huorong | TrojanDropper/Agent.jl |