General
- Target 2026-07-09_ef79169adc7025783581d32f0c7c7ca4_elex_wannacry
- Size 137KB
- Sample260709-tl6bmsdz6z
- SHA256 6119b9b28cae55e5e57552d64b6f7d1272c809aee5ede8d62b40f37c5886e8b5
- MD5 ef79169adc7025783581d32f0c7c7ca4
- SHA1 228a0fa58e17ae4e37a1d05f214c962bcdab5ad1
- SHA512 12678ee4007b0f0f8c2c006e19a43a815fabc8b485111fcf69712700ef48b5e904bdb90f5ea15133e8b3e54a1ed0512284281571a10b5afa87c950248e774662
- SSDEEP 3072:+Ly2Kerc64CiGImRRL0tU+3ZZYRGILCSihxnQDhGgu:+Ly2Kwc64YIcYjIDLCSiDaQZ
- TLSH T1B3D30A2B905330ACDA1782BCD7EA9671E4747CA41532BD7D5B28FA302F31C616F7A858
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-09_ef79169adc7025783581d32f0c7c7ca4_elex_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_ef79169adc7025783581d32f0c7c7ca4_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_ef79169adc7025783581d32f0c7c7ca4_elex_wannacry
- Size 137KB
- SHA256 6119b9b28cae55e5e57552d64b6f7d1272c809aee5ede8d62b40f37c5886e8b5
- MD5 ef79169adc7025783581d32f0c7c7ca4
- SHA1 228a0fa58e17ae4e37a1d05f214c962bcdab5ad1
- SHA512 12678ee4007b0f0f8c2c006e19a43a815fabc8b485111fcf69712700ef48b5e904bdb90f5ea15133e8b3e54a1ed0512284281571a10b5afa87c950248e774662
- SSDEEP 3072:+Ly2Kerc64CiGImRRL0tU+3ZZYRGILCSihxnQDhGgu:+Ly2Kwc64YIcYjIDLCSiDaQZ
- TLSH T1B3D30A2B905330ACDA1782BCD7EA9671E4747CA41532BD7D5B28FA302F31C616F7A858
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Juko
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1