General
- Target 2026-04-22_38a4afd889493d6b38fd0875f209083e_elex_wannacry
- Size 49KB
- Sample260422-c8dfpsbw51
- SHA256 589ac61d43a1a6a1e264cedf498abaedccd54cff09a1a8c0a22f2382c5584a60
- MD5 38a4afd889493d6b38fd0875f209083e
- SHA1 5a6670d97a5d09ddf49632c47bfe46f365a5b9e3
- SHA512 c5c8e131b14d1165afcf611a37b8e18786e2e84c34f0eb30b7ca5568bccbfd111413523c7dbacd4b0f8ec7cd2d1cc80a325303ed916c9726e3c030f8065d3499
- SSDEEP 1536:VLsF2Kerc64sTiX2IV0DhuD4p4kojVR6h2e:VLy2Kerc64CiGImVucp4kojWh2e
- TLSH T102334C0A3BD550C2D56205B0EDAA0F35933BEC391127A75EA780765A1C72D6BCF30E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-04-22_38a4afd889493d6b38fd0875f209083e_elex_wannacry.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-22_38a4afd889493d6b38fd0875f209083e_elex_wannacry.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-22_38a4afd889493d6b38fd0875f209083e_elex_wannacry
- Size 49KB
- SHA256 589ac61d43a1a6a1e264cedf498abaedccd54cff09a1a8c0a22f2382c5584a60
- MD5 38a4afd889493d6b38fd0875f209083e
- SHA1 5a6670d97a5d09ddf49632c47bfe46f365a5b9e3
- SHA512 c5c8e131b14d1165afcf611a37b8e18786e2e84c34f0eb30b7ca5568bccbfd111413523c7dbacd4b0f8ec7cd2d1cc80a325303ed916c9726e3c030f8065d3499
- SSDEEP 1536:VLsF2Kerc64sTiX2IV0DhuD4p4kojVR6h2e:VLy2Kerc64CiGImVucp4kojWh2e
- TLSH T102334C0A3BD550C2D56205B0EDAA0F35933BEC391127A75EA780765A1C72D6BCF30E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1