General
- Target 2026-05-04_d59dfc7163f31e0a4ddb9083733f9169_elex_wannacry
- Size 30KB
- Sample260504-e2z28sfz7n
- SHA256 f477c1063edbad2a48fdd334961ba0e63c9f5843c128617bddd42785f2eadec5
- MD5 d59dfc7163f31e0a4ddb9083733f9169
- SHA1 eb5f05f81c68208ebeb2d3a3c1b40d743481e091
- SHA512 724d203e42b2c8a96f47533c88ced2f1a2911208d82ce7a7510f10f925684721746f396f70aaa827ac2268c9ee02dde254b0001615218af5c582df2f5caa20ed
- SSDEEP 768:DZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqz/eNPWQHXp:tLsF2Kerc64sTiX2IV0Dzlop
- TLSH T10AE26C3B7EF58052CAD701F0E9692F39C97E913A15299056DB800E4D2CB1DA2DBB1F4E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-04_d59dfc7163f31e0a4ddb9083733f9169_elex_wannacry.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-04_d59dfc7163f31e0a4ddb9083733f9169_elex_wannacry.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-04_d59dfc7163f31e0a4ddb9083733f9169_elex_wannacry
- Size 30KB
- SHA256 f477c1063edbad2a48fdd334961ba0e63c9f5843c128617bddd42785f2eadec5
- MD5 d59dfc7163f31e0a4ddb9083733f9169
- SHA1 eb5f05f81c68208ebeb2d3a3c1b40d743481e091
- SHA512 724d203e42b2c8a96f47533c88ced2f1a2911208d82ce7a7510f10f925684721746f396f70aaa827ac2268c9ee02dde254b0001615218af5c582df2f5caa20ed
- SSDEEP 768:DZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqz/eNPWQHXp:tLsF2Kerc64sTiX2IV0Dzlop
- TLSH T10AE26C3B7EF58052CAD701F0E9692F39C97E913A15299056DB800E4D2CB1DA2DBB1F4E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Juko
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1