General
- Target 2026-05-07_94b73a6fb3d5df67d323052dfb580548_elex_wannacry
- Size 49KB
- Sample260507-cc71fadw3x
- SHA256 e89261b0df8705bffabd2d3b493ab7e3664abf30a9f26cea46cf25b027942d6f
- MD5 94b73a6fb3d5df67d323052dfb580548
- SHA1 0e83bc175e2629ab9bd9694e4973251f886d9006
- SHA512 e167ed65c76e59baffb7e2d86bfa03c1dc55e325ff783b0ff8452b1c4b5dd1d9171202cc82ac7f88bf798048f8a1992d56c815d470a54c76bbc91a3dcb14619e
- SSDEEP 1536:VLsF2Kerc64sTiX2IV0DhuD4p4kojVR6h2k:VLy2Kerc64CiGImVucp4kojWh2k
- TLSH T198334C0A3BD550C2D56205B0EDAA0F35933BEC391127A75EA780765A1C72D6BCF30E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-07_94b73a6fb3d5df67d323052dfb580548_elex_wannacry.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-07_94b73a6fb3d5df67d323052dfb580548_elex_wannacry.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-07_94b73a6fb3d5df67d323052dfb580548_elex_wannacry
- Size 49KB
- SHA256 e89261b0df8705bffabd2d3b493ab7e3664abf30a9f26cea46cf25b027942d6f
- MD5 94b73a6fb3d5df67d323052dfb580548
- SHA1 0e83bc175e2629ab9bd9694e4973251f886d9006
- SHA512 e167ed65c76e59baffb7e2d86bfa03c1dc55e325ff783b0ff8452b1c4b5dd1d9171202cc82ac7f88bf798048f8a1992d56c815d470a54c76bbc91a3dcb14619e
- SSDEEP 1536:VLsF2Kerc64sTiX2IV0DhuD4p4kojVR6h2k:VLy2Kerc64CiGImVucp4kojWh2k
- TLSH T198334C0A3BD550C2D56205B0EDAA0F35933BEC391127A75EA780765A1C72D6BCF30E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Juko
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1