General
- Target 2026-07-01_2c1da077c6802380dd80bc5fde50072b_elex_wannacry
- Size 32KB
- Sample260701-pby3csdv5p
- SHA256 0c7d0564b34295cdf9915a15b224b32beed8b6564d995ecbf6c374c63db4c561
- MD5 2c1da077c6802380dd80bc5fde50072b
- SHA1 546407b31d297e939f77f4998b420f8b84eee616
- SHA512 b69dab10a60278423b10e9c5242ef200424c0d2dbf0d1fc4af0d763ac40651e6ebb4749491d46a07b33b856a1e9beb036f5af05a8f6c4f7bb54518e99f05b505
- SSDEEP 768:qZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqiNPWQHlb:OLsF2Kerc64sTiX2IV0Dpmb
- TLSH T1C5E2192B2AA17052C59220B0F9591F34C43D5DB50F6BB062F74D7A6928B2D63CF71ACE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-01_2c1da077c6802380dd80bc5fde50072b_elex_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_2c1da077c6802380dd80bc5fde50072b_elex_wannacry.exe
Resource
win11ltsc2024-20260629-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_2c1da077c6802380dd80bc5fde50072b_elex_wannacry
- Size 32KB
- SHA256 0c7d0564b34295cdf9915a15b224b32beed8b6564d995ecbf6c374c63db4c561
- MD5 2c1da077c6802380dd80bc5fde50072b
- SHA1 546407b31d297e939f77f4998b420f8b84eee616
- SHA512 b69dab10a60278423b10e9c5242ef200424c0d2dbf0d1fc4af0d763ac40651e6ebb4749491d46a07b33b856a1e9beb036f5af05a8f6c4f7bb54518e99f05b505
- SSDEEP 768:qZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqiNPWQHlb:OLsF2Kerc64sTiX2IV0Dpmb
- TLSH T1C5E2192B2AA17052C59220B0F9591F34C43D5DB50F6BB062F74D7A6928B2D63CF71ACE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1