General
- Target 2026-04-19_156eb15ffdcbc428a6c5480dc3ae0f27_elex_wannacry
- Size 42KB
- Sample260419-p74bysf14t
- SHA256 0bd23ed1e21fc36310532261fbbb6bcd1489c0c3b23d359499ead7d97d395ce4
- MD5 156eb15ffdcbc428a6c5480dc3ae0f27
- SHA1 2e64b6da8616418066335fb652feda22aa243c69
- SHA512 e7a2c8a55bc718a232bed0a33e72a2bdcb5ba1dfb076aa65ea1e5ccffc791f00d278745cafaed21f2e906893879f7e3ff4ab17363d864bf7e1f4d88b255fe33d
- SSDEEP 768:zNZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqPNPWQHXFMcnrfrqx4RgutbGHix8f41m:z/LsF2Kerc64sTiX2IV0DgsfrfWJF2+x
- TLSH T17013171776A460D2CDB76074E91A4E30437E9CF664A7B317A72076202DB3D5ACFA02CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-04-19_156eb15ffdcbc428a6c5480dc3ae0f27_elex_wannacry.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-19_156eb15ffdcbc428a6c5480dc3ae0f27_elex_wannacry.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-19_156eb15ffdcbc428a6c5480dc3ae0f27_elex_wannacry
- Size 42KB
- SHA256 0bd23ed1e21fc36310532261fbbb6bcd1489c0c3b23d359499ead7d97d395ce4
- MD5 156eb15ffdcbc428a6c5480dc3ae0f27
- SHA1 2e64b6da8616418066335fb652feda22aa243c69
- SHA512 e7a2c8a55bc718a232bed0a33e72a2bdcb5ba1dfb076aa65ea1e5ccffc791f00d278745cafaed21f2e906893879f7e3ff4ab17363d864bf7e1f4d88b255fe33d
- SSDEEP 768:zNZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqPNPWQHXFMcnrfrqx4RgutbGHix8f41m:z/LsF2Kerc64sTiX2IV0DgsfrfWJF2+x
- TLSH T17013171776A460D2CDB76074E91A4E30437E9CF664A7B317A72076202DB3D5ACFA02CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1