General
- Target 2026-05-17_72f58d2d86e4ffddc80a2412be7394a5_elex_wannacry
- Size 49KB
- Sample260517-jf54kshv6n
- SHA256 4544eb4f7b8a72fc8ecffd1517d31c316c93de7d0a2747c8b954461571f53ffc
- MD5 72f58d2d86e4ffddc80a2412be7394a5
- SHA1 5adb42cedae8743378db041c3a55deb2127408c0
- SHA512 3b5b72028830f9f8c7d5b6dbb015788725e92aa60b59caa9a69fdc1136b2739c81a6e4d526513a3b611ceec22252430b1aafa8b4b7da75d6de7e00c42c5b33f2
- SSDEEP 1536:4LsF2Kerc64sTiX2IV0Dhuj4p4kojVR6h2i:4Ly2Kerc64CiGImVu8p4kojWh2i
- TLSH T188334C0A2BD650C2D56205B0E99A0F75833FDC3A2127A75EE740765A1C72D6BCF30E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-17_72f58d2d86e4ffddc80a2412be7394a5_elex_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-17_72f58d2d86e4ffddc80a2412be7394a5_elex_wannacry.exe
Resource
win11-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-17_72f58d2d86e4ffddc80a2412be7394a5_elex_wannacry
- Size 49KB
- SHA256 4544eb4f7b8a72fc8ecffd1517d31c316c93de7d0a2747c8b954461571f53ffc
- MD5 72f58d2d86e4ffddc80a2412be7394a5
- SHA1 5adb42cedae8743378db041c3a55deb2127408c0
- SHA512 3b5b72028830f9f8c7d5b6dbb015788725e92aa60b59caa9a69fdc1136b2739c81a6e4d526513a3b611ceec22252430b1aafa8b4b7da75d6de7e00c42c5b33f2
- SSDEEP 1536:4LsF2Kerc64sTiX2IV0Dhuj4p4kojVR6h2i:4Ly2Kerc64CiGImVu8p4kojWh2i
- TLSH T188334C0A2BD650C2D56205B0E99A0F75833FDC3A2127A75EE740765A1C72D6BCF30E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1