General
- Target 2026-05-04_1079a2e4d9ec464a6fcff82cacdff16f_elex_wannacry
- Size 56KB
- Sample260504-vefcbab13k
- SHA256 18a5b684326ee7b4a3970e08769800d596d98b0258c478d5a939e5339b5fb1b4
- MD5 1079a2e4d9ec464a6fcff82cacdff16f
- SHA1 dae14b07e7d26790d24dd65607a0407d48073bd9
- SHA512 a890ef80e8685dbfc67a9f46f35d0903189c703471241fab363b5c5880b7e8d5627be3e7085c3e209ec235cbb983ca280a144a801927f4200efb0d20996e40f7
- SSDEEP 1536:PLsF2Kerc64sTiX2IV0DeRa8OKFVG9WGWJ:PLy2Kerc64CiGImqRa8OKFE9WBJ
- TLSH T1584319277AE55CD2C15360F0EAE49B308038FD7219279023E794BB9816BEC92DF7169D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-04_1079a2e4d9ec464a6fcff82cacdff16f_elex_wannacry.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-04_1079a2e4d9ec464a6fcff82cacdff16f_elex_wannacry.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-04_1079a2e4d9ec464a6fcff82cacdff16f_elex_wannacry
- Size 56KB
- SHA256 18a5b684326ee7b4a3970e08769800d596d98b0258c478d5a939e5339b5fb1b4
- MD5 1079a2e4d9ec464a6fcff82cacdff16f
- SHA1 dae14b07e7d26790d24dd65607a0407d48073bd9
- SHA512 a890ef80e8685dbfc67a9f46f35d0903189c703471241fab363b5c5880b7e8d5627be3e7085c3e209ec235cbb983ca280a144a801927f4200efb0d20996e40f7
- SSDEEP 1536:PLsF2Kerc64sTiX2IV0DeRa8OKFVG9WGWJ:PLy2Kerc64CiGImqRa8OKFE9WBJ
- TLSH T1584319277AE55CD2C15360F0EAE49B308038FD7219279023E794BB9816BEC92DF7169D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1