General
- Target 2026-05-31_c361e60acae3aa7af96d3a900074d566_elex_wannacry
- Size 68KB
- Sample260531-c7cssagy9w
- SHA256 8690db4666533c54b9b31956f0e9839596fe72cf57dbe1a821f9485923039ea0
- MD5 c361e60acae3aa7af96d3a900074d566
- SHA1 00b65bc6739fd2520f981bdb80fe3945de86d2ef
- SHA512 cdaf3328478debbcaa83647525debab14a13e8a101108b20b9a7bb7daf834797a8de5a23fedd2c78a87819c9aa07759a29e9911ddac3f3c27a6a4796f057a080
- SSDEEP 768:4ZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqGNPWQHd2LGm4a4RjF+S7wpx:0LsF2Kerc64sTiX2IV0DVk2LGmEQkwpx
- TLSH T12F63A0B629761011C48BD478E8186A60B933CCF53BF75753E3017AA89AB4D138FDE8C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-31_c361e60acae3aa7af96d3a900074d566_elex_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-31_c361e60acae3aa7af96d3a900074d566_elex_wannacry.exe
Resource
win11-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-31_c361e60acae3aa7af96d3a900074d566_elex_wannacry
- Size 68KB
- SHA256 8690db4666533c54b9b31956f0e9839596fe72cf57dbe1a821f9485923039ea0
- MD5 c361e60acae3aa7af96d3a900074d566
- SHA1 00b65bc6739fd2520f981bdb80fe3945de86d2ef
- SHA512 cdaf3328478debbcaa83647525debab14a13e8a101108b20b9a7bb7daf834797a8de5a23fedd2c78a87819c9aa07759a29e9911ddac3f3c27a6a4796f057a080
- SSDEEP 768:4ZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqGNPWQHd2LGm4a4RjF+S7wpx:0LsF2Kerc64sTiX2IV0DVk2LGmEQkwpx
- TLSH T12F63A0B629761011C48BD478E8186A60B933CCF53BF75753E3017AA89AB4D138FDE8C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1