General
- Target 2026-05-04_5181049bbc6c31315e6f35c173ce3b33_elex_wannacry
- Size 61KB
- Sample260504-vecw7ab13j
- SHA256 10c9c02d21cdcba4c64653a712d1faebf4e0d1d2994a9aa85a3ceaa730c0b773
- MD5 5181049bbc6c31315e6f35c173ce3b33
- SHA1 3fc2c684909f706c9f7eb9d934c748e8b6e0014b
- SHA512 8be632c3ed43609bfec9ae0daf8656926f26f9776e2fba35da4b79ff3a811b0cefbbe6c2d5846cce6290b5b97eadb682e53ff948418b624a4e1f140712a07324
- SSDEEP 1536:yLsF2Kerc64sTiX2IV0DZZbyyCwlAY0VdTQK:yLy2Kerc64CiGImVZuyp8TB
- TLSH T13C532C26B950B072D95220B06A6D6B36417A9DF10317A1D3E7407ADC68F2FD2EF306CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-04_5181049bbc6c31315e6f35c173ce3b33_elex_wannacry.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-04_5181049bbc6c31315e6f35c173ce3b33_elex_wannacry.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-04_5181049bbc6c31315e6f35c173ce3b33_elex_wannacry
- Size 61KB
- SHA256 10c9c02d21cdcba4c64653a712d1faebf4e0d1d2994a9aa85a3ceaa730c0b773
- MD5 5181049bbc6c31315e6f35c173ce3b33
- SHA1 3fc2c684909f706c9f7eb9d934c748e8b6e0014b
- SHA512 8be632c3ed43609bfec9ae0daf8656926f26f9776e2fba35da4b79ff3a811b0cefbbe6c2d5846cce6290b5b97eadb682e53ff948418b624a4e1f140712a07324
- SSDEEP 1536:yLsF2Kerc64sTiX2IV0DZZbyyCwlAY0VdTQK:yLy2Kerc64CiGImVZuyp8TB
- TLSH T13C532C26B950B072D95220B06A6D6B36417A9DF10317A1D3E7407ADC68F2FD2EF306CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1