General
- Target 2026-06-26_880f44e63132f785af9e3490e5c66d79_elex_wannacry
- Size 137KB
- Sample260629-rm4hbshs2j
- SHA256 9285dd89fdcd19ee7bdaf8b2428b9cd775eaefb7592d5ca0fe104222b01ab950
- MD5 880f44e63132f785af9e3490e5c66d79
- SHA1 ae5e182568d76f64900e6bdae2d5489aafd84f40
- SHA512 0828b4337feb7a9120d4328b134ed186b8a8efdfebdbe5ecbe84fde80c4c89a0704bde1156161595ae4f66cf27817e1667dc3f19b0f31d982446422d2ad89b45
- SSDEEP 3072:+Ly2Kerc64CiGImRRL0tU+3ZZYRGILCSihxnQDhGgl:+Ly2Kwc64YIcYjIDLCSiDaQK
- TLSH T1D0D30A2B905330ACDA1782BCD7EA9671E4747CA41532BD7D5B28FA302F31C616F7A858
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-06-26_880f44e63132f785af9e3490e5c66d79_elex_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_880f44e63132f785af9e3490e5c66d79_elex_wannacry.exe
Resource
win11ltsc2024-20260629-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_880f44e63132f785af9e3490e5c66d79_elex_wannacry
- Size 137KB
- SHA256 9285dd89fdcd19ee7bdaf8b2428b9cd775eaefb7592d5ca0fe104222b01ab950
- MD5 880f44e63132f785af9e3490e5c66d79
- SHA1 ae5e182568d76f64900e6bdae2d5489aafd84f40
- SHA512 0828b4337feb7a9120d4328b134ed186b8a8efdfebdbe5ecbe84fde80c4c89a0704bde1156161595ae4f66cf27817e1667dc3f19b0f31d982446422d2ad89b45
- SSDEEP 3072:+Ly2Kerc64CiGImRRL0tU+3ZZYRGILCSihxnQDhGgl:+Ly2Kwc64YIcYjIDLCSiDaQK
- TLSH T1D0D30A2B905330ACDA1782BCD7EA9671E4747CA41532BD7D5B28FA302F31C616F7A858
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1