General
- Target 2026-05-06_31ae302b7af7df9b2413ae0a022c2344_elex_wannacry
- Size 49KB
- Sample260506-phkhjsas9s
- SHA256 f5ba8d969b2ce9a621e9fec4e14729e577198322db1e08a7955a975630a58137
- MD5 31ae302b7af7df9b2413ae0a022c2344
- SHA1 dee53e2d686a9a4b9d4333704944824c6b8f8010
- SHA512 42c47ffb90234867c0f4bfb306ff9d104c34b73334226ce5df3c6c8938d8b14fd2929f77549cc855a912019f74a306f149acb401ec229ad6ad26ff8100c1c582
- SSDEEP 1536:VLsF2Kerc64sTiX2IV0Dhuj4p4kojVR6h20:VLy2Kerc64CiGImVu8p4kojWh20
- TLSH T1C2334C0A2BD650C2D56205B0E99A0F75833FDC3A2127A75EE740765A1C72D6BCF30E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-06_31ae302b7af7df9b2413ae0a022c2344_elex_wannacry.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-06_31ae302b7af7df9b2413ae0a022c2344_elex_wannacry.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-06_31ae302b7af7df9b2413ae0a022c2344_elex_wannacry
- Size 49KB
- SHA256 f5ba8d969b2ce9a621e9fec4e14729e577198322db1e08a7955a975630a58137
- MD5 31ae302b7af7df9b2413ae0a022c2344
- SHA1 dee53e2d686a9a4b9d4333704944824c6b8f8010
- SHA512 42c47ffb90234867c0f4bfb306ff9d104c34b73334226ce5df3c6c8938d8b14fd2929f77549cc855a912019f74a306f149acb401ec229ad6ad26ff8100c1c582
- SSDEEP 1536:VLsF2Kerc64sTiX2IV0Dhuj4p4kojVR6h20:VLy2Kerc64CiGImVu8p4kojWh20
- TLSH T1C2334C0A2BD650C2D56205B0E99A0F75833FDC3A2127A75EE740765A1C72D6BCF30E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1