General
- Target 2026-04-16_5bbb15624bedf022087e52ee5489ac32_elex_wannacry
- Size 57KB
- Sample260416-qbppcsf19q
- SHA256 c841e4f24ede5a5c34e390818ded57739ebcfe7c7cbabd94a539ff8f6b5dc3c4
- MD5 5bbb15624bedf022087e52ee5489ac32
- SHA1 96282f22c81e05f162da78163f1ed313524b8f6b
- SHA512 ac2fafaf935b9cd8ca7cfd75c48c40ea7f8c8d1d9926e9a91c3526f9b7bc4aebc4a885a9155c0a0414b9cda4bb6f66ba414e725ae94b65fe915c54efb50c7045
- SSDEEP 1536:zcLsF2Kerc64sTiX2IV0DgsfrfWJF2+BD9Dmqa2:wLy2Kerc64CiGImEsoDfa2
- TLSH T12F433913366414D1D8AB2138A4025E354BB8BDB21467F622B750BA1E1D779DACFA83CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-04-16_5bbb15624bedf022087e52ee5489ac32_elex_wannacry.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-16_5bbb15624bedf022087e52ee5489ac32_elex_wannacry.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-16_5bbb15624bedf022087e52ee5489ac32_elex_wannacry
- Size 57KB
- SHA256 c841e4f24ede5a5c34e390818ded57739ebcfe7c7cbabd94a539ff8f6b5dc3c4
- MD5 5bbb15624bedf022087e52ee5489ac32
- SHA1 96282f22c81e05f162da78163f1ed313524b8f6b
- SHA512 ac2fafaf935b9cd8ca7cfd75c48c40ea7f8c8d1d9926e9a91c3526f9b7bc4aebc4a885a9155c0a0414b9cda4bb6f66ba414e725ae94b65fe915c54efb50c7045
- SSDEEP 1536:zcLsF2Kerc64sTiX2IV0DgsfrfWJF2+BD9Dmqa2:wLy2Kerc64CiGImEsoDfa2
- TLSH T12F433913366414D1D8AB2138A4025E354BB8BDB21467F622B750BA1E1D779DACFA83CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1