General
- Target 2026-07-04_df70b0a9e9d235a4ad7384399718301d_elex_wannacry
- Size 94KB
- Sample260704-vmvf7sat5v
- SHA256 66ce7b65f47491686f26c107b106a2a3e3a6dd3ed28368c8b713a0234356757f
- MD5 df70b0a9e9d235a4ad7384399718301d
- SHA1 a41f7d371af1f4c61dc4308903f3f6a4d077219b
- SHA512 4fa1e8534d69d2df58ceba6b6c96b1e55029346f2f83c3e7149c3b7cb8273f7f971163b852a35c3c6e17ba8f257e8e04d5ebcda1b3d7eb5b2cf5f13604422640
- SSDEEP 1536:RLsF2Kerc64sTiX2IV0DxY8rqBLSaVl17oMvTbMvY4+oi9u6G6/N3:RLy2Kerc64CiGImFYgUBWTb4/N3
- TLSH T1B4937C2157A85153F0B246B0AD761B3098B97CB56AB3B21EBB03774D1871D21FF34B8A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-04_df70b0a9e9d235a4ad7384399718301d_elex_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_df70b0a9e9d235a4ad7384399718301d_elex_wannacry.exe
Resource
win11ltsc2024-20260629-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_df70b0a9e9d235a4ad7384399718301d_elex_wannacry
- Size 94KB
- SHA256 66ce7b65f47491686f26c107b106a2a3e3a6dd3ed28368c8b713a0234356757f
- MD5 df70b0a9e9d235a4ad7384399718301d
- SHA1 a41f7d371af1f4c61dc4308903f3f6a4d077219b
- SHA512 4fa1e8534d69d2df58ceba6b6c96b1e55029346f2f83c3e7149c3b7cb8273f7f971163b852a35c3c6e17ba8f257e8e04d5ebcda1b3d7eb5b2cf5f13604422640
- SSDEEP 1536:RLsF2Kerc64sTiX2IV0DxY8rqBLSaVl17oMvTbMvY4+oi9u6G6/N3:RLy2Kerc64CiGImFYgUBWTb4/N3
- TLSH T1B4937C2157A85153F0B246B0AD761B3098B97CB56AB3B21EBB03774D1871D21FF34B8A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1