2026-05-03_ddf239bbd7d24a42857d84f8ccf00c0c_elex_wannacry
Classification: Malicious
2026-05-03_ddf239bbd7d24a42857d84f8ccf00c0c_elex_wannacry is a malicious file sample. Reported by 1 threat source, last seen 2026-05-03.
Detection summary
- 62 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Stormser |
Triage |
2026-05-03 21:06:13 |
2026-05-03 21:06:13 |
malicious-activity
|
|
Tags
stormser
discovery
persistence
worm
Sample information
- Filenames
- 2026-05-03_ddf239bbd7d24a42857d84f8ccf00c0c_elex_wannacry
- SHA-256
c74dc3393bc9e9652f940cd0740e45387d7149a7d0f54174303b49bf46c4b0e8- First indexed
- 2026-05-03 21:06:13
- Last updated
- 2026-09-03 00:14:36
Antivirus detections
| Engine | Detection |
|---|
| ALYac | Application.Hacktool.ASU |
| APEX | Malicious |
| AVG | Win32:Dropper-OYD [Drp] |
| AhnLab-V3 | Trojan/Win.StormAttack.92820 |
| Antiy-AVL | Trojan[DDoS]/Win32.StormAttack |
| Arcabit | Application.Hacktool.ASU |
| Avast | Win32:Dropper-OYD [Drp] |
| Avira | TR/Dropper.Gen |
| BitDefender | Application.Hacktool.ASU |
| Bkav | W32.AIDetectMalware |
| CAT-QuickHeal | PUA.StormserRI.S28491914 |
| CTX | exe.hacktool.generic |
| ClamAV | Win.Malware.Ulise-9951851-0 |
| CrowdStrike | win/malicious_confidence_100% (D) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | DDoS.Storm.156 |
| ESET-NOD32 | Win32/TrojanDropper.Agent.PIH trojan |
| Elastic | malicious (high confidence) |
| Emsisoft | Application.Hacktool.ASU (B) |
| F-Secure | Trojan.TR/Dropper.Gen |
| Fortinet | W32/ServStart.AS!tr |
| GData | Win32.Trojan.PSE.16MTBDU |
| Google | Detected |
| Gridinsoft | Trojan.Win32.Agent.oa!s1 |
| Ikarus | Trojan-Downloader.Win32.Pangu |
| Jiangmin | TrojanDDoS.StormAttack.a |
| K7AntiVirus | Trojan ( 005b1a971 ) |
| K7GW | Trojan ( 00557fef1 ) |
| Kaspersky | Trojan-DDoS.Win32.StormAttack.a |
| Kingsoft | malware.kb.a.999 |
| Malwarebytes | Malware.AI.2681005475 |
| MaxSecure | Trojan.DDoS.StormAttack.a |
| McAfeeD | Real Protect-LS!DDF239BBD7D2 |
| MicroWorld-eScan | Application.Hacktool.ASU |
| Microsoft | DDoS:Win32/Stormser.A |
| NANO-Antivirus | Trojan.Win32.StormAttack.fnqayj |
| Panda | Trj/Genetic.gen |
| Rising | Dropper.Agent!1.C6A3 (CLASSIC) |
| SUPERAntiSpyware | Hack.Tool/Gen-DDoS |
| Sangfor | Trojan.Win32.Save.a |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | BehavesLike.Win32.Trojan.kz |
| Sophos | Troj/Agent-BIXD |
| TACHYON | Trojan/W32.StormAttack.61440 |
| Trapmine | malicious.high.ml.score |
| TrellixENS | GenericRXHD-CI!DDF239BBD7D2 |
| TrendMicro | Trojan.Win32.STORMER.SMTH |
| TrendMicro-HouseCall | Trojan.Win32.STORMER.SMTH |
| VBA32 | TrojanDDoS.StormAttack |
| VIPRE | Application.Hacktool.ASU |
| Varist | W32/Trojan.VYFZ-2790 |
| ViRobot | Trojan.Win32.Agent.61440.JD |
| VirIT | Trojan.Win32.Storm.GA |
| Webroot | W32.Trojan.Gen |
| Xcitium | TrojWare.Win32.Magania.~AAC@f80ur |
| Yandex | Trojan.GenAsa!WGvR5YnH2mQ |
| Zillya | Tool.StormAttackGen.Win32.1 |
| ZoneAlarm | Troj/Agent-BIXD |
| alibabacloud | Trojan[dropper]:Win/StormAttack.81704e80 |
| huorong | TrojanDropper/Agent.jl |