General
- Target 2026-07-01_ebadc606b1cde4d549572909c6a40d8a_elex_wannacry
- Size 64KB
- Sample260701-b4le3sb14m
- SHA256 ef533e4c3a33652f5e54bda9004ab6dc2fa26d3c68b50adea82b0e4cbf1e6cc3
- MD5 ebadc606b1cde4d549572909c6a40d8a
- SHA1 5e3508c524e225a3787e5b4d90c4526e416af5c6
- SHA512 cb574e0f759c736a8628357ef3d38dbbe022a17f2816349eefb74a7a099dc8ad2ee039114ba4c648a440bdef187842d91fbbd315a7a50b24bd9951351768b82a
- SSDEEP 1536:sLsF2Kerc64sTiX2IV0DgsowGeP58ORX73iu/u8:sLy2Kerc64CiGIm8so288
- TLSH T138535C2AA5A220B8C95780B0D5776B32D4397C350036767EA345FF312E71E12EB25E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-01_ebadc606b1cde4d549572909c6a40d8a_elex_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_ebadc606b1cde4d549572909c6a40d8a_elex_wannacry.exe
Resource
win11ltsc2024-20260629-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_ebadc606b1cde4d549572909c6a40d8a_elex_wannacry
- Size 64KB
- SHA256 ef533e4c3a33652f5e54bda9004ab6dc2fa26d3c68b50adea82b0e4cbf1e6cc3
- MD5 ebadc606b1cde4d549572909c6a40d8a
- SHA1 5e3508c524e225a3787e5b4d90c4526e416af5c6
- SHA512 cb574e0f759c736a8628357ef3d38dbbe022a17f2816349eefb74a7a099dc8ad2ee039114ba4c648a440bdef187842d91fbbd315a7a50b24bd9951351768b82a
- SSDEEP 1536:sLsF2Kerc64sTiX2IV0DgsowGeP58ORX73iu/u8:sLy2Kerc64CiGIm8so288
- TLSH T138535C2AA5A220B8C95780B0D5776B32D4397C350036767EA345FF312E71E12EB25E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1