General
- Target 2026-06-29_d56d028d01e8a59095d2ac79effb23e2_elex_wannacry
- Size 32KB
- Sample260630-dhsclsds8v
- SHA256 8495d72bf5a1918ff4dec1ef9dc2e251f5e343293adc9b60c6c4de9b449e63ad
- MD5 d56d028d01e8a59095d2ac79effb23e2
- SHA1 3e97a213dde84c014e86925681b887b2bd50d03c
- SHA512 3a2a15bf47a3db5d776d4fcec4cce7e1fde05018a7443f52c82cb01cedc20a0f07c1bbcbba08a95043ff327418586d249ff75ab11ecebdf04ba8641d479d573a
- SSDEEP 768:qZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqiNPWQHl3:OLsF2Kerc64sTiX2IV0Dpm3
- TLSH T125E2192B2AA17052C59220B0F9591F34C43D5DB50F6BB062F74D7A6928B2D63CF71ACE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-06-29_d56d028d01e8a59095d2ac79effb23e2_elex_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_d56d028d01e8a59095d2ac79effb23e2_elex_wannacry.exe
Resource
win11ltsc2024-20260629-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_d56d028d01e8a59095d2ac79effb23e2_elex_wannacry
- Size 32KB
- SHA256 8495d72bf5a1918ff4dec1ef9dc2e251f5e343293adc9b60c6c4de9b449e63ad
- MD5 d56d028d01e8a59095d2ac79effb23e2
- SHA1 3e97a213dde84c014e86925681b887b2bd50d03c
- SHA512 3a2a15bf47a3db5d776d4fcec4cce7e1fde05018a7443f52c82cb01cedc20a0f07c1bbcbba08a95043ff327418586d249ff75ab11ecebdf04ba8641d479d573a
- SSDEEP 768:qZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqiNPWQHl3:OLsF2Kerc64sTiX2IV0Dpm3
- TLSH T125E2192B2AA17052C59220B0F9591F34C43D5DB50F6BB062F74D7A6928B2D63CF71ACE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1