General
- Target 2026-07-06_5e2d543f6700e82eb66016fd494cea94_elex_wannacry
- Size 37KB
- Sample260706-wtcemsez3n
- SHA256 f207109db4c4ce87d9f64b33867afc34d46b7d6c07401c24df5e54dc781748e9
- MD5 5e2d543f6700e82eb66016fd494cea94
- SHA1 61c9071712b95ca10a79dad54a574231fcfa60ef
- SHA512 db4ee912610d0164e521e592de7a33fd625afdaeb158c7527019cc8f8f6a4cb695c6e667400f5e1a0a77f0b24b32db3d3dd337e00192ce01594f464ef1f84cc0
- SSDEEP 768:FZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqKNPWQHpZa5ywaN:3LsF2Kerc64sTiX2IV0Dhuogwm
- TLSH T139035C1A299160A2D55310B0E9D82FB4C53D8C76106BB062F740BE59A8B3CD7DF72BCE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-06_5e2d543f6700e82eb66016fd494cea94_elex_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_5e2d543f6700e82eb66016fd494cea94_elex_wannacry.exe
Resource
win11ltsc2024-20260629-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_5e2d543f6700e82eb66016fd494cea94_elex_wannacry
- Size 37KB
- SHA256 f207109db4c4ce87d9f64b33867afc34d46b7d6c07401c24df5e54dc781748e9
- MD5 5e2d543f6700e82eb66016fd494cea94
- SHA1 61c9071712b95ca10a79dad54a574231fcfa60ef
- SHA512 db4ee912610d0164e521e592de7a33fd625afdaeb158c7527019cc8f8f6a4cb695c6e667400f5e1a0a77f0b24b32db3d3dd337e00192ce01594f464ef1f84cc0
- SSDEEP 768:FZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqKNPWQHpZa5ywaN:3LsF2Kerc64sTiX2IV0Dhuogwm
- TLSH T139035C1A299160A2D55310B0E9D82FB4C53D8C76106BB062F740BE59A8B3CD7DF72BCE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1