General
- Target 2026-04-17_1eeefded5a6e0c5c1d0e7b637e102da0_elex_wannacry
- Size 105KB
- Sample260417-rwb5facv5v
- SHA256 991c2014f341e04d78b2fef12c8e611648134610d3e6eb93f87f36529b00ea92
- MD5 1eeefded5a6e0c5c1d0e7b637e102da0
- SHA1 48d2ce244c437e99030dd84e959107bcd0fb17b1
- SHA512 8fa6c7df4eee3f62cc337f706897d749b755a08fa2c5786d6ac559305a2b531b11bc5c000033c1b67d37ab56c9e539dac219a426e90d6a68ef3f1c407359ebbb
- SSDEEP 768:lZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqiNPWQHF5:XLsF2Kerc64sTiX2IV0DpK5
- TLSH T190B32A2B2AA57052C59320B0F9591F34C43D9DB9016BB0A2F7457B6928B2D63CF71ECE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-04-17_1eeefded5a6e0c5c1d0e7b637e102da0_elex_wannacry.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-17_1eeefded5a6e0c5c1d0e7b637e102da0_elex_wannacry.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-17_1eeefded5a6e0c5c1d0e7b637e102da0_elex_wannacry
- Size 105KB
- SHA256 991c2014f341e04d78b2fef12c8e611648134610d3e6eb93f87f36529b00ea92
- MD5 1eeefded5a6e0c5c1d0e7b637e102da0
- SHA1 48d2ce244c437e99030dd84e959107bcd0fb17b1
- SHA512 8fa6c7df4eee3f62cc337f706897d749b755a08fa2c5786d6ac559305a2b531b11bc5c000033c1b67d37ab56c9e539dac219a426e90d6a68ef3f1c407359ebbb
- SSDEEP 768:lZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqiNPWQHF5:XLsF2Kerc64sTiX2IV0DpK5
- TLSH T190B32A2B2AA57052C59320B0F9591F34C43D9DB9016BB0A2F7457B6928B2D63CF71ECE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1