General
- Target 2026-05-11_c2814e5a09aa5795c5e7232a1936db03_elex_wannacry
- Size 42KB
- Sample260511-ra7dfsbx71
- SHA256 c7ff407e5f6495d21ea56ee0bcce579caada995375c3f93eba22088219574879
- MD5 c2814e5a09aa5795c5e7232a1936db03
- SHA1 d9bd3a0cfb895db2927f4b2e41fa063184cf5936
- SHA512 a2d7c7fc31c5add02ac369f9b055b3f1ec72f00ffcd5e374478d5e4e29b4c46339e9c8da20bafffa9987356e7736c00d08269aceb954973edd8617cc1f58df16
- SSDEEP 768:zNZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqPNPWQHXFMcnrfrqx4RgutbGHix8f41t:z/LsF2Kerc64sTiX2IV0DgsfrfWJF2+G
- TLSH T18413171776A460D2CDB76074E91A4E30437E9CF664A7B317A72076202DB3D5ACFA02CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-11_c2814e5a09aa5795c5e7232a1936db03_elex_wannacry.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-11_c2814e5a09aa5795c5e7232a1936db03_elex_wannacry.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-11_c2814e5a09aa5795c5e7232a1936db03_elex_wannacry
- Size 42KB
- SHA256 c7ff407e5f6495d21ea56ee0bcce579caada995375c3f93eba22088219574879
- MD5 c2814e5a09aa5795c5e7232a1936db03
- SHA1 d9bd3a0cfb895db2927f4b2e41fa063184cf5936
- SHA512 a2d7c7fc31c5add02ac369f9b055b3f1ec72f00ffcd5e374478d5e4e29b4c46339e9c8da20bafffa9987356e7736c00d08269aceb954973edd8617cc1f58df16
- SSDEEP 768:zNZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqPNPWQHXFMcnrfrqx4RgutbGHix8f41t:z/LsF2Kerc64sTiX2IV0DgsfrfWJF2+G
- TLSH T18413171776A460D2CDB76074E91A4E30437E9CF664A7B317A72076202DB3D5ACFA02CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1