General
- Target 2026-05-27_6437d5cf526755f9169489e5cf2b5525_elex_wannacry
- Size 32KB
- Sample260527-e55f5ahw2z
- SHA256 55af302f342126f4d81502943013803513c6be4a233768b0df2dde9043908db8
- MD5 6437d5cf526755f9169489e5cf2b5525
- SHA1 656df861d8595c434c7ce2e54cec9ee2c59aba97
- SHA512 6883bc34534acd405c0ca7cd191795dc653baec4e61ad3dd0e873e19884b8a64133b02a8068c547bcadbc349c0b593e47c869af9e9be9d50699ec71928b3184d
- SSDEEP 768:qZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqKNPWQHpn:OLsF2Kerc64sTiX2IV0Dhun
- TLSH T1C6E23A1B2AA17052C59320B0FA991F34C57D4CB6116BB066FB417B6928B2D63CFB0DCE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-27_6437d5cf526755f9169489e5cf2b5525_elex_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-27_6437d5cf526755f9169489e5cf2b5525_elex_wannacry.exe
Resource
win11-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-27_6437d5cf526755f9169489e5cf2b5525_elex_wannacry
- Size 32KB
- SHA256 55af302f342126f4d81502943013803513c6be4a233768b0df2dde9043908db8
- MD5 6437d5cf526755f9169489e5cf2b5525
- SHA1 656df861d8595c434c7ce2e54cec9ee2c59aba97
- SHA512 6883bc34534acd405c0ca7cd191795dc653baec4e61ad3dd0e873e19884b8a64133b02a8068c547bcadbc349c0b593e47c869af9e9be9d50699ec71928b3184d
- SSDEEP 768:qZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqKNPWQHpn:OLsF2Kerc64sTiX2IV0Dhun
- TLSH T1C6E23A1B2AA17052C59320B0FA991F34C57D4CB6116BB066FB417B6928B2D63CFB0DCE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1