General
- Target 2026-04-17_4dfd10ffabd351832d9e7432397b200f_elex_wannacry
- Size 32KB
- Sample260417-shetvads9s
- SHA256 43668306d4fda738d1e6f1140cf00701ca2fac3f7191142aa2a0be930c2827f4
- MD5 4dfd10ffabd351832d9e7432397b200f
- SHA1 b839e8c383f180e436e1aab16e4c964ec67539a7
- SHA512 1e28380eb4ba105a8c816c31cd2f045dc7cea5bcbf97e945a91c4f55a686a9bc1a963956afd963c8bdd79a0d803006c271113104ea50d283dc5a08e92bbff6e5
- SSDEEP 768:J9ZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqNNPWQHf7K:ZLsF2Kerc64sTiX2IV0DKy7K
- TLSH T1CCE23B2B6AA57052C59320F0F9592F34C43D9DB9016BB062F7417B6928B2D63CF71ACE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-04-17_4dfd10ffabd351832d9e7432397b200f_elex_wannacry.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-17_4dfd10ffabd351832d9e7432397b200f_elex_wannacry.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-17_4dfd10ffabd351832d9e7432397b200f_elex_wannacry
- Size 32KB
- SHA256 43668306d4fda738d1e6f1140cf00701ca2fac3f7191142aa2a0be930c2827f4
- MD5 4dfd10ffabd351832d9e7432397b200f
- SHA1 b839e8c383f180e436e1aab16e4c964ec67539a7
- SHA512 1e28380eb4ba105a8c816c31cd2f045dc7cea5bcbf97e945a91c4f55a686a9bc1a963956afd963c8bdd79a0d803006c271113104ea50d283dc5a08e92bbff6e5
- SSDEEP 768:J9ZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqNNPWQHf7K:ZLsF2Kerc64sTiX2IV0DKy7K
- TLSH T1CCE23B2B6AA57052C59320F0F9592F34C43D9DB9016BB062F7417B6928B2D63CF71ACE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1