General
- Target 2026-04-19_ae00dd80ac146b767e225e9ff0b215f5_elex_wannacry
- Size 49KB
- Sample260420-a7bjlsay4x
- SHA256 b543dd8a9edeb74dd2c9a14496e89c17690c216efe4c540e0584a896830136b2
- MD5 ae00dd80ac146b767e225e9ff0b215f5
- SHA1 1f952bbc685298b2a8bda2871ec5992ebda4959e
- SHA512 c70fe1dfe67be5cac0858dca0fb149ccc2e82f153b59c6d3916767c5d772ae121e25bc687eead67bc3b1e3fa48b33f600db5d884d0fca4bfc94fb1e1c06c3baa
- SSDEEP 1536:VLsF2Kerc64sTiX2IV0Dhuj4p4kojVR6h21:VLy2Kerc64CiGImVu8p4kojWh21
- TLSH T1D1334C0A2BD650C2D56205B0E99A0F75833FDC3A2127A75EE740765A1C72D6BCF30E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-04-19_ae00dd80ac146b767e225e9ff0b215f5_elex_wannacry.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-19_ae00dd80ac146b767e225e9ff0b215f5_elex_wannacry.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-19_ae00dd80ac146b767e225e9ff0b215f5_elex_wannacry
- Size 49KB
- SHA256 b543dd8a9edeb74dd2c9a14496e89c17690c216efe4c540e0584a896830136b2
- MD5 ae00dd80ac146b767e225e9ff0b215f5
- SHA1 1f952bbc685298b2a8bda2871ec5992ebda4959e
- SHA512 c70fe1dfe67be5cac0858dca0fb149ccc2e82f153b59c6d3916767c5d772ae121e25bc687eead67bc3b1e3fa48b33f600db5d884d0fca4bfc94fb1e1c06c3baa
- SSDEEP 1536:VLsF2Kerc64sTiX2IV0Dhuj4p4kojVR6h21:VLy2Kerc64CiGImVu8p4kojWh21
- TLSH T1D1334C0A2BD650C2D56205B0E99A0F75833FDC3A2127A75EE740765A1C72D6BCF30E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1