General
- Target 2026-04-15_1171ce78472ebc7b41f20264ebb7d257_elex_wannacry
- Size 49KB
- Sample260415-2v76labv7j
- SHA256 9c209429a94e7d09d6020cd5325a89cc3befa18c547237ec1bd34b43789a076e
- MD5 1171ce78472ebc7b41f20264ebb7d257
- SHA1 908a8bf8b3978793aec7d57d88dc71b498878e71
- SHA512 a32f80da99f86b128cc0565c4e1b402b01af4e2770517ee9d7001fac36f8217dc54ea8748641daf477473f8c249558e2f6e385252741904f9f6d1b12e6173ff0
- SSDEEP 1536:VLsF2Kerc64sTiX2IV0DhuD4p4kojVR6h2I:VLy2Kerc64CiGImVucp4kojWh2I
- TLSH T131334C0A3BD550C2D56205B0EDAA0F35833BEC391127A75EA780765A1C72D6BCF30E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-04-15_1171ce78472ebc7b41f20264ebb7d257_elex_wannacry.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_1171ce78472ebc7b41f20264ebb7d257_elex_wannacry.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_1171ce78472ebc7b41f20264ebb7d257_elex_wannacry
- Size 49KB
- SHA256 9c209429a94e7d09d6020cd5325a89cc3befa18c547237ec1bd34b43789a076e
- MD5 1171ce78472ebc7b41f20264ebb7d257
- SHA1 908a8bf8b3978793aec7d57d88dc71b498878e71
- SHA512 a32f80da99f86b128cc0565c4e1b402b01af4e2770517ee9d7001fac36f8217dc54ea8748641daf477473f8c249558e2f6e385252741904f9f6d1b12e6173ff0
- SSDEEP 1536:VLsF2Kerc64sTiX2IV0DhuD4p4kojVR6h2I:VLy2Kerc64CiGImVucp4kojWh2I
- TLSH T131334C0A3BD550C2D56205B0EDAA0F35833BEC391127A75EA780765A1C72D6BCF30E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1