General
- Target 2026-07-04_5d5f3618db9f01fd444349b2e09b88da_elex_wannacry
- Size 49KB
- Sample260704-1vdrbaev8w
- SHA256 a6ff9f2590a4d7794a88d53fdf929c70a40c1da1c673d276284573f5900cc3aa
- MD5 5d5f3618db9f01fd444349b2e09b88da
- SHA1 f779de95fbfdddb759d102a7dd09a9e9dfcb2a23
- SHA512 d16fc8c403e44a1577dfecb68291d9f479f7cec68a55d112dfe3ec95f2176814393676ef2c4cf86a2ceee4fb02ca2ae9c8f2d01a96001d3a4eca4a4820d91b39
- SSDEEP 1536:VLsF2Kerc64sTiX2IV0DhuD4p4kojVR6h2/:VLy2Kerc64CiGImVucp4kojWh2/
- TLSH T1E9334C0A3BD550C2D56205B0EDAA0F35933BEC391127A75EA740765A1C72D6BCF30E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-04_5d5f3618db9f01fd444349b2e09b88da_elex_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_5d5f3618db9f01fd444349b2e09b88da_elex_wannacry.exe
Resource
win11ltsc2024-20260629-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_5d5f3618db9f01fd444349b2e09b88da_elex_wannacry
- Size 49KB
- SHA256 a6ff9f2590a4d7794a88d53fdf929c70a40c1da1c673d276284573f5900cc3aa
- MD5 5d5f3618db9f01fd444349b2e09b88da
- SHA1 f779de95fbfdddb759d102a7dd09a9e9dfcb2a23
- SHA512 d16fc8c403e44a1577dfecb68291d9f479f7cec68a55d112dfe3ec95f2176814393676ef2c4cf86a2ceee4fb02ca2ae9c8f2d01a96001d3a4eca4a4820d91b39
- SSDEEP 1536:VLsF2Kerc64sTiX2IV0DhuD4p4kojVR6h2/:VLy2Kerc64CiGImVucp4kojWh2/
- TLSH T1E9334C0A3BD550C2D56205B0EDAA0F35933BEC391127A75EA740765A1C72D6BCF30E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1