General
- Target 2026-05-23_9cf2b78672de9e294cc5ae35d821e95a_elex_wannacry
- Size 30KB
- Sample260523-keregahs5x
- SHA256 773dbfb67f5575e25656b3fb52fd7b662b73431a43577962d0300aa2e343e721
- MD5 9cf2b78672de9e294cc5ae35d821e95a
- SHA1 6fbdbe353a22dd3935fa71c3338d6b98c4acec88
- SHA512 4e392040576c9c4ae9f9b34f17f02338cb7ceca0fb3b6e4f88ce82fafe76841709a8e9c1cf4db79efeb3f9d743fc1a5ce0661468f402223cfe37e0d7be1a2cb3
- SSDEEP 768:HZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqGNPWQHd2LO:5LsF2Kerc64sTiX2IV0DVk2LO
- TLSH T167E22A2B2AA17052C69320F0F9591F34C43E5DB5016BB0A6F7417B6928B6D63CF719CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-23_9cf2b78672de9e294cc5ae35d821e95a_elex_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-23_9cf2b78672de9e294cc5ae35d821e95a_elex_wannacry.exe
Resource
win11-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-23_9cf2b78672de9e294cc5ae35d821e95a_elex_wannacry
- Size 30KB
- SHA256 773dbfb67f5575e25656b3fb52fd7b662b73431a43577962d0300aa2e343e721
- MD5 9cf2b78672de9e294cc5ae35d821e95a
- SHA1 6fbdbe353a22dd3935fa71c3338d6b98c4acec88
- SHA512 4e392040576c9c4ae9f9b34f17f02338cb7ceca0fb3b6e4f88ce82fafe76841709a8e9c1cf4db79efeb3f9d743fc1a5ce0661468f402223cfe37e0d7be1a2cb3
- SSDEEP 768:HZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqGNPWQHd2LO:5LsF2Kerc64sTiX2IV0DVk2LO
- TLSH T167E22A2B2AA17052C69320F0F9591F34C43E5DB5016BB0A6F7417B6928B6D63CF719CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1