General
- Target 2026-04-25_a50ad3cc935bd895319b79bb8e98a831_elex_wannacry
- Size 32KB
- Sample260425-c24djscy7v
- SHA256 c64d2b3eefacb79f037a8c356967c30966ebf2bb425361858f34fb48a2f0f383
- MD5 a50ad3cc935bd895319b79bb8e98a831
- SHA1 1fc766eeb4bd8fbbf6a076a7b0c450334d553239
- SHA512 3f070566cccdb94a9733c9866ed7ba688e401090e2a768d8f1698f5dd5f5bc52e13ebe23642f528cb1af2d0410c7b400a5b3b718d2faeb6dfbc69cba048befc2
- SSDEEP 768:J9ZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqNNPWQHf7k:ZLsF2Kerc64sTiX2IV0DKy7k
- TLSH T120E23B2B6AA57052C59320F0F9592F34C43D9DB9016BB062F7417B6928B2D63CF71ACE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-04-25_a50ad3cc935bd895319b79bb8e98a831_elex_wannacry.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-25_a50ad3cc935bd895319b79bb8e98a831_elex_wannacry.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-25_a50ad3cc935bd895319b79bb8e98a831_elex_wannacry
- Size 32KB
- SHA256 c64d2b3eefacb79f037a8c356967c30966ebf2bb425361858f34fb48a2f0f383
- MD5 a50ad3cc935bd895319b79bb8e98a831
- SHA1 1fc766eeb4bd8fbbf6a076a7b0c450334d553239
- SHA512 3f070566cccdb94a9733c9866ed7ba688e401090e2a768d8f1698f5dd5f5bc52e13ebe23642f528cb1af2d0410c7b400a5b3b718d2faeb6dfbc69cba048befc2
- SSDEEP 768:J9ZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqNNPWQHf7k:ZLsF2Kerc64sTiX2IV0DKy7k
- TLSH T120E23B2B6AA57052C59320F0F9592F34C43D9DB9016BB062F7417B6928B2D63CF71ACE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Juko
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1