General
- Target 2026-06-09_112b799494ccaa79638c68b37fc23131_elex_wannacry
- Size 138KB
- Sample260609-tr8zqaex7l
- SHA256 781483215445ba1894d4dac1a120379cf6f670ce6c43649e2389ecf721222202
- MD5 112b799494ccaa79638c68b37fc23131
- SHA1 05a97533def094fb22735159db7437c765575caa
- SHA512 c9ae03e9f0f6cc93a7ffa7aee21a4939c8bbca62e1c9d0c5211369ecd4d031dd095adbcfb1fbf71073574a34e75f11d7ddb09357a1b40e686e23030e116dadc3
- SSDEEP 3072:sLy2Kerc64CiGIm8aRgqG91AJ0qVIdWkDnRqkXCMFJBrXWWestyFG7y:sLy2Kwc64YIZ+C2JisNM5XWWe0Lu
- TLSH T165D33A1563FA461AE5FF06BCA930103F0576BF221917E59F394831FD0B79781CAA23A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-06-09_112b799494ccaa79638c68b37fc23131_elex_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-09_112b799494ccaa79638c68b37fc23131_elex_wannacry.exe
Resource
win11-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-09_112b799494ccaa79638c68b37fc23131_elex_wannacry
- Size 138KB
- SHA256 781483215445ba1894d4dac1a120379cf6f670ce6c43649e2389ecf721222202
- MD5 112b799494ccaa79638c68b37fc23131
- SHA1 05a97533def094fb22735159db7437c765575caa
- SHA512 c9ae03e9f0f6cc93a7ffa7aee21a4939c8bbca62e1c9d0c5211369ecd4d031dd095adbcfb1fbf71073574a34e75f11d7ddb09357a1b40e686e23030e116dadc3
- SSDEEP 3072:sLy2Kerc64CiGIm8aRgqG91AJ0qVIdWkDnRqkXCMFJBrXWWestyFG7y:sLy2Kwc64YIZ+C2JisNM5XWWe0Lu
- TLSH T165D33A1563FA461AE5FF06BCA930103F0576BF221917E59F394831FD0B79781CAA23A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1