General
- Target 2026-04-15_db66d53df2f61d2f7d66224034164214_elex_wannacry
- Size 67KB
- Sample260415-nvzmkafy4t
- SHA256 c296b7d928c571fdf7997b04bb7e2d4b93cbd4fcef748ed1f54dcc1bbdf5dd8c
- MD5 db66d53df2f61d2f7d66224034164214
- SHA1 5fbbde09a3e9ffbf12fbcbb790b0f6d106433a58
- SHA512 beaff987995eb710337775a45270c7a57cdf8c2f502ce13b3d5f43fc9c545e1bba2025447c679f3af42c7a887a0c837d00faf86a59fd6e32f71ca9d5db1702b3
- SSDEEP 1536:aLsF2Kerc64sTiX2IV0DVyIGFoyyCwlAY0VdTQ5:aLy2Kerc64CiGImRylFyp8T+
- TLSH T195633B16B950B032D99211B46A6D6B36817A9DF10707A0D3F7407ADD28F2BD2EF346CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-04-15_db66d53df2f61d2f7d66224034164214_elex_wannacry.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_db66d53df2f61d2f7d66224034164214_elex_wannacry.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_db66d53df2f61d2f7d66224034164214_elex_wannacry
- Size 67KB
- SHA256 c296b7d928c571fdf7997b04bb7e2d4b93cbd4fcef748ed1f54dcc1bbdf5dd8c
- MD5 db66d53df2f61d2f7d66224034164214
- SHA1 5fbbde09a3e9ffbf12fbcbb790b0f6d106433a58
- SHA512 beaff987995eb710337775a45270c7a57cdf8c2f502ce13b3d5f43fc9c545e1bba2025447c679f3af42c7a887a0c837d00faf86a59fd6e32f71ca9d5db1702b3
- SSDEEP 1536:aLsF2Kerc64sTiX2IV0DVyIGFoyyCwlAY0VdTQ5:aLy2Kerc64CiGImRylFyp8T+
- TLSH T195633B16B950B032D99211B46A6D6B36817A9DF10707A0D3F7407ADD28F2BD2EF346CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Juko
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1