General
- Target 2026-05-27_304a0108b64cf1389df9feab6b725387_elex_wannacry
- Size 49KB
- Sample260527-e3be9se17m
- SHA256 d51c050040271e6d4b26b20781a9a4132c09b16c9c0e3c1b46c6c4450c16484b
- MD5 304a0108b64cf1389df9feab6b725387
- SHA1 fbdbc2773b1e6446bc84e71c99fc0963ade1fdcd
- SHA512 44d245a4ad04db448d5a6666f3a375e11574e3ba9b0f2fe3e2a7b6f3176a1bc476d21927b0a1d5f1f7ebfd8c53f1f71721f8481d2a1df5466b0a1ba5dd26b26f
- SSDEEP 1536:VLsF2Kerc64sTiX2IV0Dhuj4p4kojVR6h2Q:VLy2Kerc64CiGImVu8p4kojWh2Q
- TLSH T12D334C0A2BD650C2D56205B0E99A0F75833FDC3A2127A75EE740765A1C72D6BCF30E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-27_304a0108b64cf1389df9feab6b725387_elex_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-27_304a0108b64cf1389df9feab6b725387_elex_wannacry.exe
Resource
win11-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-27_304a0108b64cf1389df9feab6b725387_elex_wannacry
- Size 49KB
- SHA256 d51c050040271e6d4b26b20781a9a4132c09b16c9c0e3c1b46c6c4450c16484b
- MD5 304a0108b64cf1389df9feab6b725387
- SHA1 fbdbc2773b1e6446bc84e71c99fc0963ade1fdcd
- SHA512 44d245a4ad04db448d5a6666f3a375e11574e3ba9b0f2fe3e2a7b6f3176a1bc476d21927b0a1d5f1f7ebfd8c53f1f71721f8481d2a1df5466b0a1ba5dd26b26f
- SSDEEP 1536:VLsF2Kerc64sTiX2IV0Dhuj4p4kojVR6h2Q:VLy2Kerc64CiGImVu8p4kojWh2Q
- TLSH T12D334C0A2BD650C2D56205B0E99A0F75833FDC3A2127A75EE740765A1C72D6BCF30E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1