General
- Target 2026-05-04_6a054173b804270858f4a643d54ef25d_elex_wannacry
- Size 105KB
- Sample260504-ea158afw2l
- SHA256 f7711be296901f4e3cc69327c9a332c5c07622c643072c7b2648324844da7ec7
- MD5 6a054173b804270858f4a643d54ef25d
- SHA1 3a8cbd4d7515317fa2261a9c65d1488d2c4f22cc
- SHA512 5c90dec8710e7a31c0b04c2e4fcc78f5b217d3aaf3c5b897ae78374b9de0f8530fb73609611f7f92948aba1734a279de967ef8ca6082b35101afca590972d54d
- SSDEEP 768:lZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqiNPWQHFV:XLsF2Kerc64sTiX2IV0DpKV
- TLSH T139B32A2B2AA57052C59320B0F9591F34C43D9DB9016BB0A2F7457B6928B2D63CF71ECE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-04_6a054173b804270858f4a643d54ef25d_elex_wannacry.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-04_6a054173b804270858f4a643d54ef25d_elex_wannacry.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-04_6a054173b804270858f4a643d54ef25d_elex_wannacry
- Size 105KB
- SHA256 f7711be296901f4e3cc69327c9a332c5c07622c643072c7b2648324844da7ec7
- MD5 6a054173b804270858f4a643d54ef25d
- SHA1 3a8cbd4d7515317fa2261a9c65d1488d2c4f22cc
- SHA512 5c90dec8710e7a31c0b04c2e4fcc78f5b217d3aaf3c5b897ae78374b9de0f8530fb73609611f7f92948aba1734a279de967ef8ca6082b35101afca590972d54d
- SSDEEP 768:lZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqiNPWQHFV:XLsF2Kerc64sTiX2IV0DpKV
- TLSH T139B32A2B2AA57052C59320B0F9591F34C43D9DB9016BB0A2F7457B6928B2D63CF71ECE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1