General
- Target 2026-07-01_5b5b9646bb9e8bdfbf58c37e395104c9_elex_wannacry
- Size 48KB
- Sample260701-n5fmfaft4w
- SHA256 db4f20bdfd8fa0b86eac42414b81c88ad9c56aae11a22de3a9e58e55fc0cfd8e
- MD5 5b5b9646bb9e8bdfbf58c37e395104c9
- SHA1 17f2df6920c16f756e334655ca3261d6cbb1afc4
- SHA512 2d238c10ac8ca9a9fb218a9b075d5230c9723a8e55089632f620710b15349f5fac1a3d1a5097537eb07958fbc16b998bca9040cd83b8b3141394e999bffc3f03
- SSDEEP 1536:bLsF2Kerc64sTiX2IV0DWvir2jaFBZ0/v8Z:bLy2Kerc64CiGImav42j0h
- TLSH T124234A2EB5A26068C55390B0E9EA3E31D4357C75013B752AA700BB252E76E23CF77D8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-01_5b5b9646bb9e8bdfbf58c37e395104c9_elex_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_5b5b9646bb9e8bdfbf58c37e395104c9_elex_wannacry.exe
Resource
win11ltsc2024-20260629-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_5b5b9646bb9e8bdfbf58c37e395104c9_elex_wannacry
- Size 48KB
- SHA256 db4f20bdfd8fa0b86eac42414b81c88ad9c56aae11a22de3a9e58e55fc0cfd8e
- MD5 5b5b9646bb9e8bdfbf58c37e395104c9
- SHA1 17f2df6920c16f756e334655ca3261d6cbb1afc4
- SHA512 2d238c10ac8ca9a9fb218a9b075d5230c9723a8e55089632f620710b15349f5fac1a3d1a5097537eb07958fbc16b998bca9040cd83b8b3141394e999bffc3f03
- SSDEEP 1536:bLsF2Kerc64sTiX2IV0DWvir2jaFBZ0/v8Z:bLy2Kerc64CiGImav42j0h
- TLSH T124234A2EB5A26068C55390B0E9EA3E31D4357C75013B752AA700BB252E76E23CF77D8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1