General
- Target 2026-05-05_42d56119157c2ccf8453a89e30b48383_elex_wannacry
- Size 30KB
- Sample260505-jfl1psev8l
- SHA256 564fd0bafca48eb112dc49ef7d878216a63ca7be55776f91ff22b477ea9990f5
- MD5 42d56119157c2ccf8453a89e30b48383
- SHA1 f9a31221c54a738ccbf4ea9e864fa863906aaba5
- SHA512 d0aada727b209477c56dd50ddac32ef8e511459ac0bf36bf6f62c09054d701fbeec828968a97fc62786ca9e3052bc56aa28b74ea86879730d7d2a8b3173ef788
- SSDEEP 768:qZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqkkzNPWQHrl:OLsF2Kerc64sTiX2IV0DkFMl
- TLSH T1F8E27D2E3EA28053C5D700F0E9A91F78C97E953B2569A05BCB400E4D3CF1D65DAB1E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-05_42d56119157c2ccf8453a89e30b48383_elex_wannacry.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-05_42d56119157c2ccf8453a89e30b48383_elex_wannacry.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-05_42d56119157c2ccf8453a89e30b48383_elex_wannacry
- Size 30KB
- SHA256 564fd0bafca48eb112dc49ef7d878216a63ca7be55776f91ff22b477ea9990f5
- MD5 42d56119157c2ccf8453a89e30b48383
- SHA1 f9a31221c54a738ccbf4ea9e864fa863906aaba5
- SHA512 d0aada727b209477c56dd50ddac32ef8e511459ac0bf36bf6f62c09054d701fbeec828968a97fc62786ca9e3052bc56aa28b74ea86879730d7d2a8b3173ef788
- SSDEEP 768:qZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqkkzNPWQHrl:OLsF2Kerc64sTiX2IV0DkFMl
- TLSH T1F8E27D2E3EA28053C5D700F0E9A91F78C97E953B2569A05BCB400E4D3CF1D65DAB1E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1