General
- Target 2026-04-16_de717c00202d820921953207cd4a9f1e_elex_wannacry
- Size 87KB
- Sample260416-dchk8aew4l
- SHA256 b617e112f57d67e59054e82328030b9f8f0c39296f3a5b508bdb67de5307a391
- MD5 de717c00202d820921953207cd4a9f1e
- SHA1 f815d76564f9da274014888b5836ba84c287f9f2
- SHA512 d2a1d2629b874f71ad0fe96af4e970853cf4f3e57776fd803be30ec22a2558ffa778b7ffed92fd77aa46a67b1e0c99b184b9ae2b08bd55ab8353ecfbd1f368cd
- SSDEEP 1536:2LsF2Kerc64sTiX2IV0DpK8SE9nYOzmEQkwpv:2Ly2Kerc64CiGIm1K851YO6EQkwpv
- TLSH T1B893A1763A259190C48BD178E8155AA0B932DCF52FF71303E6417AAC59B1E13CFAE8C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-04-16_de717c00202d820921953207cd4a9f1e_elex_wannacry.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-16_de717c00202d820921953207cd4a9f1e_elex_wannacry.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-16_de717c00202d820921953207cd4a9f1e_elex_wannacry
- Size 87KB
- SHA256 b617e112f57d67e59054e82328030b9f8f0c39296f3a5b508bdb67de5307a391
- MD5 de717c00202d820921953207cd4a9f1e
- SHA1 f815d76564f9da274014888b5836ba84c287f9f2
- SHA512 d2a1d2629b874f71ad0fe96af4e970853cf4f3e57776fd803be30ec22a2558ffa778b7ffed92fd77aa46a67b1e0c99b184b9ae2b08bd55ab8353ecfbd1f368cd
- SSDEEP 1536:2LsF2Kerc64sTiX2IV0DpK8SE9nYOzmEQkwpv:2Ly2Kerc64CiGIm1K851YO6EQkwpv
- TLSH T1B893A1763A259190C48BD178E8155AA0B932DCF52FF71303E6417AAC59B1E13CFAE8C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1