General
- Target 2026-07-01_1836f1ceddf346f84bb44c1264404c86_elex_wannacry
- Size 47KB
- Sample260701-pewfmsfx3w
- SHA256 118812874edce095b1dacd141623c7d5ee7633b32b79ce1cfff7a05c7a2e23a4
- MD5 1836f1ceddf346f84bb44c1264404c86
- SHA1 cce298e3f3e82d8d2afb07700f9c48369bb82839
- SHA512 50298b64d958d461a18a01deb8d814c7375423141673ea5ca7d2c6656b2a69fc9feeb25c9830249add103a461cd3c55483e98734dc980a46d53c98b680211f9b
- SSDEEP 768:tyZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqZNPWQHmgyFIvA0vqxet2dMINJO:t2LsF2Kerc64sTiX2IV0DOlgy6vlvqxo
- TLSH T16F235B173EA520C1D6D610B0EAA90F78843DEDB50127A152F780B65D2CB6E62DF71ECE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-01_1836f1ceddf346f84bb44c1264404c86_elex_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_1836f1ceddf346f84bb44c1264404c86_elex_wannacry.exe
Resource
win11ltsc2024-20260630-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_1836f1ceddf346f84bb44c1264404c86_elex_wannacry
- Size 47KB
- SHA256 118812874edce095b1dacd141623c7d5ee7633b32b79ce1cfff7a05c7a2e23a4
- MD5 1836f1ceddf346f84bb44c1264404c86
- SHA1 cce298e3f3e82d8d2afb07700f9c48369bb82839
- SHA512 50298b64d958d461a18a01deb8d814c7375423141673ea5ca7d2c6656b2a69fc9feeb25c9830249add103a461cd3c55483e98734dc980a46d53c98b680211f9b
- SSDEEP 768:tyZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqZNPWQHmgyFIvA0vqxet2dMINJO:t2LsF2Kerc64sTiX2IV0DOlgy6vlvqxo
- TLSH T16F235B173EA520C1D6D610B0EAA90F78843DEDB50127A152F780B65D2CB6E62DF71ECE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1