General
- Target 2026-05-27_9e9f6a88866866c9a713af3553339b87_elex_wannacry
- Size 49KB
- Sample260527-e8b9rafs4k
- SHA256 f2731c640d1412498931b0632e3b056490796dc9b9c3f5ca582943ee42185d8b
- MD5 9e9f6a88866866c9a713af3553339b87
- SHA1 c6f56e912b2fb24207f143bc3fc90e21b59183a7
- SHA512 881bb166414d480df30b84af5a2d58d8e9fd348136d37bb2d2edcc6b27b73fefc6b1ca5c8f07e1a4c0433df4fad26cccbe5128d9562f965846c5deb021ba739a
- SSDEEP 1536:4LsF2Kerc64sTiX2IV0Dhuj4p4kojVR6h2b:4Ly2Kerc64CiGImVu8p4kojWh2b
- TLSH T172334C0A2BD650C2D56205B0E99A0F75833FDC3A2127A75EE740765A1C72D6BCF30E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-27_9e9f6a88866866c9a713af3553339b87_elex_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-27_9e9f6a88866866c9a713af3553339b87_elex_wannacry.exe
Resource
win11-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-27_9e9f6a88866866c9a713af3553339b87_elex_wannacry
- Size 49KB
- SHA256 f2731c640d1412498931b0632e3b056490796dc9b9c3f5ca582943ee42185d8b
- MD5 9e9f6a88866866c9a713af3553339b87
- SHA1 c6f56e912b2fb24207f143bc3fc90e21b59183a7
- SHA512 881bb166414d480df30b84af5a2d58d8e9fd348136d37bb2d2edcc6b27b73fefc6b1ca5c8f07e1a4c0433df4fad26cccbe5128d9562f965846c5deb021ba739a
- SSDEEP 1536:4LsF2Kerc64sTiX2IV0Dhuj4p4kojVR6h2b:4Ly2Kerc64CiGImVu8p4kojWh2b
- TLSH T172334C0A2BD650C2D56205B0E99A0F75833FDC3A2127A75EE740765A1C72D6BCF30E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1