General
- Target 2026-04-19_064464e9d28e71018280f8eeca9da844_elex_wannacry
- Size 105KB
- Sample260419-rt82dscy3l
- SHA256 403e5b350d48999074aa1324042d49e890396bf031518cba88d72c5db1f1c0b5
- MD5 064464e9d28e71018280f8eeca9da844
- SHA1 e5212fc7b30024742ce7b0dbca71cd691bace7fe
- SHA512 a5a357dbfca355e9fe0f376b85011a9f4c134efb3d712f90df1664580fa3669a14dee85f4df2d911a387589a542bb81e565bff42671a795900704e5706712c12
- SSDEEP 768:qZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqeNPWQHEz0:OLsF2Kerc64sTiX2IV0D91z0
- TLSH T1AAB32A2B2AA57052C59320F0F9591F34C43D9DB9116BB0A2F7417B6928B2D63CF71ACE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-04-19_064464e9d28e71018280f8eeca9da844_elex_wannacry.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-19_064464e9d28e71018280f8eeca9da844_elex_wannacry.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-19_064464e9d28e71018280f8eeca9da844_elex_wannacry
- Size 105KB
- SHA256 403e5b350d48999074aa1324042d49e890396bf031518cba88d72c5db1f1c0b5
- MD5 064464e9d28e71018280f8eeca9da844
- SHA1 e5212fc7b30024742ce7b0dbca71cd691bace7fe
- SHA512 a5a357dbfca355e9fe0f376b85011a9f4c134efb3d712f90df1664580fa3669a14dee85f4df2d911a387589a542bb81e565bff42671a795900704e5706712c12
- SSDEEP 768:qZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqeNPWQHEz0:OLsF2Kerc64sTiX2IV0D91z0
- TLSH T1AAB32A2B2AA57052C59320F0F9591F34C43D9DB9116BB0A2F7417B6928B2D63CF71ACE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Juko
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1