General
- Target 2026-07-11_e86c8c456bae8867d7320c2a361d297f_elex_wannacry
- Size 153KB
- Sample260711-mf68eshz3w
- SHA256 a80921870270190d1d1b0ad6766d253c56a99b3cdb31f6de3ddfe5c2323476ee
- MD5 e86c8c456bae8867d7320c2a361d297f
- SHA1 edfe24834488ce2944cc6e3ef556c520a5597e12
- SHA512 b4158f782eeddcd950ba339bdef4a319e2b1b9cf562ae4087b514d93640dc4cdf2f5852f29c5b9acd8c5e9f93a168b1a5576b3e1ecaa10e2a9bb92f0dbf6f1c6
- SSDEEP 3072:3Ly2Kerc64CiGImpvxPloaK6Or1kz36Rq4QqjYCr6KNe2aKd/EAGzYMzhq1/Z2g1:3Ly2Kwc64YIspdmrNPyEe2Xd/EPYQmZj
- TLSH T1CCE35C06A14350F6CC2740B056D96BFF8A31BE3544219EEAE798FC69EE73891672D306
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-11_e86c8c456bae8867d7320c2a361d297f_elex_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_e86c8c456bae8867d7320c2a361d297f_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_e86c8c456bae8867d7320c2a361d297f_elex_wannacry
- Size 153KB
- SHA256 a80921870270190d1d1b0ad6766d253c56a99b3cdb31f6de3ddfe5c2323476ee
- MD5 e86c8c456bae8867d7320c2a361d297f
- SHA1 edfe24834488ce2944cc6e3ef556c520a5597e12
- SHA512 b4158f782eeddcd950ba339bdef4a319e2b1b9cf562ae4087b514d93640dc4cdf2f5852f29c5b9acd8c5e9f93a168b1a5576b3e1ecaa10e2a9bb92f0dbf6f1c6
- SSDEEP 3072:3Ly2Kerc64CiGImpvxPloaK6Or1kz36Rq4QqjYCr6KNe2aKd/EAGzYMzhq1/Z2g1:3Ly2Kwc64YIspdmrNPyEe2Xd/EPYQmZj
- TLSH T1CCE35C06A14350F6CC2740B056D96BFF8A31BE3544219EEAE798FC69EE73891672D306
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1