General
- Target 2026-07-02_b0304db6044eda05f888c7db80f7f056_elex_wannacry
- Size 88KB
- Sample260702-gpydzscs9v
- SHA256 e5bbbf22bdf00977714750de3c8ede953918e9b3b5b24a41f050cfe5abba3728
- MD5 b0304db6044eda05f888c7db80f7f056
- SHA1 0c870a6d95b8f1cf5d67b50eeee27e037bcab2e3
- SHA512 ee02164326639aceece9292da407851809b371e02ac0efcfa701380d1eba076ea830e76f027b49acab33fe3c3ba82ed2efdc02336fca11e73323c02848d74824
- SSDEEP 1536:zLsF2Kerc64sTiX2IV0D7c/wGeP58ORX73iu/uwzCR3lsl5cN35fWJcedCgVjrsf:zLy2Kerc64CiGImHc/28wzCBlycJWeeY
- TLSH T1CB933C2EA59320FCCA5BC170C6BB6732D4357C251035B63E6344FB352E70E62AB29E59
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-02_b0304db6044eda05f888c7db80f7f056_elex_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_b0304db6044eda05f888c7db80f7f056_elex_wannacry.exe
Resource
win11ltsc2024-20260629-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_b0304db6044eda05f888c7db80f7f056_elex_wannacry
- Size 88KB
- SHA256 e5bbbf22bdf00977714750de3c8ede953918e9b3b5b24a41f050cfe5abba3728
- MD5 b0304db6044eda05f888c7db80f7f056
- SHA1 0c870a6d95b8f1cf5d67b50eeee27e037bcab2e3
- SHA512 ee02164326639aceece9292da407851809b371e02ac0efcfa701380d1eba076ea830e76f027b49acab33fe3c3ba82ed2efdc02336fca11e73323c02848d74824
- SSDEEP 1536:zLsF2Kerc64sTiX2IV0D7c/wGeP58ORX73iu/uwzCR3lsl5cN35fWJcedCgVjrsf:zLy2Kerc64CiGImHc/28wzCBlycJWeeY
- TLSH T1CB933C2EA59320FCCA5BC170C6BB6732D4357C251035B63E6344FB352E70E62AB29E59
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1