General
- Target 2026-05-17_d6f907567cd341483e3a610c4973b667_elex_wannacry
- Size 49KB
- Sample260517-qplvmagy7y
- SHA256 091f879d8110e86cf1e3a6a9eecde79847482e7f5bfcdb4ca6e1b709f8c462c9
- MD5 d6f907567cd341483e3a610c4973b667
- SHA1 d72e3d3e7004cc7ea21c74c555deac9ceead7749
- SHA512 cd5bdade188d4ee95a338427ffe89f4b21aa0c3ba6571335590799190745aec6f057ca2953a34902a8ecbc717ae8d903247350cc14be9ba5afb5445bd435d3bd
- SSDEEP 1536:4LsF2Kerc64sTiX2IV0Dhuj4p4kojVR6h2O:4Ly2Kerc64CiGImVu8p4kojWh2O
- TLSH T1C0334C0A2BD650C2D56205B0E99A0F75833FDC3A2127A75EE740765A1C72D6BCF30E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-17_d6f907567cd341483e3a610c4973b667_elex_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-17_d6f907567cd341483e3a610c4973b667_elex_wannacry.exe
Resource
win11-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-17_d6f907567cd341483e3a610c4973b667_elex_wannacry
- Size 49KB
- SHA256 091f879d8110e86cf1e3a6a9eecde79847482e7f5bfcdb4ca6e1b709f8c462c9
- MD5 d6f907567cd341483e3a610c4973b667
- SHA1 d72e3d3e7004cc7ea21c74c555deac9ceead7749
- SHA512 cd5bdade188d4ee95a338427ffe89f4b21aa0c3ba6571335590799190745aec6f057ca2953a34902a8ecbc717ae8d903247350cc14be9ba5afb5445bd435d3bd
- SSDEEP 1536:4LsF2Kerc64sTiX2IV0Dhuj4p4kojVR6h2O:4Ly2Kerc64CiGImVu8p4kojWh2O
- TLSH T1C0334C0A2BD650C2D56205B0E99A0F75833FDC3A2127A75EE740765A1C72D6BCF30E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Juko
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1