General
- Target 2026-04-20_0f6aa8cc6d729620afc7374ee8c0629b_elex_wannacry
- Size 137KB
- Sample260420-l93xesbx2w
- SHA256 a2ea0b991cb41a14d0134e32d947f45543d81bb013ae9ba6f16488f0b601b82a
- MD5 0f6aa8cc6d729620afc7374ee8c0629b
- SHA1 44b4a249c79504de1f0a7353563a917b43c1e4ec
- SHA512 7f490e42b44bac1a630c9b05125309bcc28c6c39b9cfe1b52d86410e3d31895be658a334b1f970a4c7c338dbdb7375602109f180ba0f935eea33ab4ab7ceff9b
- SSDEEP 3072:+Ly2Kerc64CiGImRRL0tU+3ZZYRGILCSihxnQDhGga:+Ly2Kwc64YIcYjIDLCSiDaQZ
- TLSH T19AD30A2B905330ACDA1782BCD7EA9671E4747CA41532BD7D5B28FA302F31C616F7A858
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-04-20_0f6aa8cc6d729620afc7374ee8c0629b_elex_wannacry.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-20_0f6aa8cc6d729620afc7374ee8c0629b_elex_wannacry.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-20_0f6aa8cc6d729620afc7374ee8c0629b_elex_wannacry
- Size 137KB
- SHA256 a2ea0b991cb41a14d0134e32d947f45543d81bb013ae9ba6f16488f0b601b82a
- MD5 0f6aa8cc6d729620afc7374ee8c0629b
- SHA1 44b4a249c79504de1f0a7353563a917b43c1e4ec
- SHA512 7f490e42b44bac1a630c9b05125309bcc28c6c39b9cfe1b52d86410e3d31895be658a334b1f970a4c7c338dbdb7375602109f180ba0f935eea33ab4ab7ceff9b
- SSDEEP 3072:+Ly2Kerc64CiGImRRL0tU+3ZZYRGILCSihxnQDhGga:+Ly2Kwc64YIcYjIDLCSiDaQZ
- TLSH T19AD30A2B905330ACDA1782BCD7EA9671E4747CA41532BD7D5B28FA302F31C616F7A858
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Juko
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1