General
- Target 2026-04-15_c6582e9d6f48de47d96784ecb0ffd329_elex_wannacry
- Size 57KB
- Sample260416-aptmgacy8p
- SHA256 6ab0fa611a38c59f8b148fbd56a974f23aa3a8904d719c6a58bf59809d803f23
- MD5 c6582e9d6f48de47d96784ecb0ffd329
- SHA1 82600e74139adafc6ab0e585c2d5da241427cead
- SHA512 3b5d991fbf2024b01b0328fc16129e0bbf20fbf0d1bf54008df62057b9af823838ed0179bc1cbf8ac9e16c58ced0b1b08a25ca8a5e7f42180bfb1bd53a840548
- SSDEEP 1536:qLsF2Kerc64sTiX2IV0DYlNpyyCwlAY0VdTQV:qLy2Kerc64CiGImklNUyp8Tq
- TLSH T13F433C16B950B072D99220B06A6D6B36417A9DF10317A1D3E7407ADD68F2FD2EF306CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-04-15_c6582e9d6f48de47d96784ecb0ffd329_elex_wannacry.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_c6582e9d6f48de47d96784ecb0ffd329_elex_wannacry.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_c6582e9d6f48de47d96784ecb0ffd329_elex_wannacry
- Size 57KB
- SHA256 6ab0fa611a38c59f8b148fbd56a974f23aa3a8904d719c6a58bf59809d803f23
- MD5 c6582e9d6f48de47d96784ecb0ffd329
- SHA1 82600e74139adafc6ab0e585c2d5da241427cead
- SHA512 3b5d991fbf2024b01b0328fc16129e0bbf20fbf0d1bf54008df62057b9af823838ed0179bc1cbf8ac9e16c58ced0b1b08a25ca8a5e7f42180bfb1bd53a840548
- SSDEEP 1536:qLsF2Kerc64sTiX2IV0DYlNpyyCwlAY0VdTQV:qLy2Kerc64CiGImklNUyp8Tq
- TLSH T13F433C16B950B072D99220B06A6D6B36417A9DF10317A1D3E7407ADD68F2FD2EF306CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1