General
- Target 2026-05-07_7d373dfc1474cacc5246b8cf25f91d30_elex_wannacry
- Size 49KB
- Sample260507-c6fs2sat2j
- SHA256 13abb218c456c254f0e19a04fc265f529e7ee5ab89ef44b677e409e507fe537f
- MD5 7d373dfc1474cacc5246b8cf25f91d30
- SHA1 6ded262468119362309944ca9d6c0b042236a134
- SHA512 4cd33b9f32976aaefedcc41db329f346e8fcf39a369e602397ec7ee60f7f9f4bb891bc6e35f748291e8ea1f429c3f4a1339d1c0c50851a7e9f1dc4bd8bad7817
- SSDEEP 1536:4LsF2Kerc64sTiX2IV0Dhuj4p4kojVR6h2/:4Ly2Kerc64CiGImVu8p4kojWh2/
- TLSH T128334C0A2BD650C2D56205B0E99A0F75833FDC3A2127A75EE740765A1C72D6BCF30E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-07_7d373dfc1474cacc5246b8cf25f91d30_elex_wannacry.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-07_7d373dfc1474cacc5246b8cf25f91d30_elex_wannacry.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-07_7d373dfc1474cacc5246b8cf25f91d30_elex_wannacry
- Size 49KB
- SHA256 13abb218c456c254f0e19a04fc265f529e7ee5ab89ef44b677e409e507fe537f
- MD5 7d373dfc1474cacc5246b8cf25f91d30
- SHA1 6ded262468119362309944ca9d6c0b042236a134
- SHA512 4cd33b9f32976aaefedcc41db329f346e8fcf39a369e602397ec7ee60f7f9f4bb891bc6e35f748291e8ea1f429c3f4a1339d1c0c50851a7e9f1dc4bd8bad7817
- SSDEEP 1536:4LsF2Kerc64sTiX2IV0Dhuj4p4kojVR6h2/:4Ly2Kerc64CiGImVu8p4kojWh2/
- TLSH T128334C0A2BD650C2D56205B0E99A0F75833FDC3A2127A75EE740765A1C72D6BCF30E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1