General
- Target 2026-07-04_23a682b1c7554659b800b172f52a1bae_elex_wannacry
- Size 48KB
- Sample260704-e18b8aa15z
- SHA256 ca3068faf0f818e2b7d86a444cb5237458f94062d372191c93563851583d135e
- MD5 23a682b1c7554659b800b172f52a1bae
- SHA1 e32dfd905b5b9f7d02aa3d1af18d2ae8baeddc39
- SHA512 cfb321c8c55f11fb00dc55e7d837dffc1afcae621ea2cc3718437741c9f4c89a27cf20a9ad122d31af029d6e1376e6e1ae86e4506401f2d08e06d44b3dea13f5
- SSDEEP 1536:bLsF2Kerc64sTiX2IV0DWvir2jaFBZ0/v8w:bLy2Kerc64CiGImav42j0Y
- TLSH T194234A2EB5A26068C55390B0E9EA3E31D4357C75013B752AA700BB252E76E23CF77D8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-04_23a682b1c7554659b800b172f52a1bae_elex_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_23a682b1c7554659b800b172f52a1bae_elex_wannacry.exe
Resource
win11ltsc2024-20260630-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_23a682b1c7554659b800b172f52a1bae_elex_wannacry
- Size 48KB
- SHA256 ca3068faf0f818e2b7d86a444cb5237458f94062d372191c93563851583d135e
- MD5 23a682b1c7554659b800b172f52a1bae
- SHA1 e32dfd905b5b9f7d02aa3d1af18d2ae8baeddc39
- SHA512 cfb321c8c55f11fb00dc55e7d837dffc1afcae621ea2cc3718437741c9f4c89a27cf20a9ad122d31af029d6e1376e6e1ae86e4506401f2d08e06d44b3dea13f5
- SSDEEP 1536:bLsF2Kerc64sTiX2IV0DWvir2jaFBZ0/v8w:bLy2Kerc64CiGImav42j0Y
- TLSH T194234A2EB5A26068C55390B0E9EA3E31D4357C75013B752AA700BB252E76E23CF77D8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1