General
- Target 2026-07-07_407997fdf883aa0a0feebcc5ea560a3d_elex_wannacry
- Size 94KB
- Sample260707-mpf3lac17m
- SHA256 5c262d71b04ec6ccb5ac6c66c132f5cf9837d868cea7fa4463ec02f62712656e
- MD5 407997fdf883aa0a0feebcc5ea560a3d
- SHA1 88ae25072e4a2228b0cc7b090a824bce01783593
- SHA512 0525709e1e7a739a93299e11c21709cf9ae4d275be6b3e98df3919305f298e983ced386145155bcb171c3a8a0e39ba4e613c56bc728e6091d4ba0623d5ed0e82
- SSDEEP 1536:RLsF2Kerc64sTiX2IV0DxY8rqBLSaVl17oMvTbMvY4+oi9u6G6/NW:RLy2Kerc64CiGImFYgUBWTb4/NW
- TLSH T13C937C2157A85153F0B246B0AD761B3098B97CB56AB3B21EBB03774D1871D21FF34B8A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-07_407997fdf883aa0a0feebcc5ea560a3d_elex_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_407997fdf883aa0a0feebcc5ea560a3d_elex_wannacry.exe
Resource
win11ltsc2024-20260706-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_407997fdf883aa0a0feebcc5ea560a3d_elex_wannacry
- Size 94KB
- SHA256 5c262d71b04ec6ccb5ac6c66c132f5cf9837d868cea7fa4463ec02f62712656e
- MD5 407997fdf883aa0a0feebcc5ea560a3d
- SHA1 88ae25072e4a2228b0cc7b090a824bce01783593
- SHA512 0525709e1e7a739a93299e11c21709cf9ae4d275be6b3e98df3919305f298e983ced386145155bcb171c3a8a0e39ba4e613c56bc728e6091d4ba0623d5ed0e82
- SSDEEP 1536:RLsF2Kerc64sTiX2IV0DxY8rqBLSaVl17oMvTbMvY4+oi9u6G6/NW:RLy2Kerc64CiGImFYgUBWTb4/NW
- TLSH T13C937C2157A85153F0B246B0AD761B3098B97CB56AB3B21EBB03774D1871D21FF34B8A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1