General
- Target 2026-07-14_d23f8f1c514e60dde321f221dcff25e7_elex_wannacry
- Size 87KB
- Sample260714-ys3ljsft2z
- SHA256 97ba9912f20485bde6873282d57c594898a3e49768d9450a004bc0872b0f1d4f
- MD5 d23f8f1c514e60dde321f221dcff25e7
- SHA1 503ac9f3186ad4e35510a3a051c83092f7818acb
- SHA512 26d0d2b41555cb19273a27455a88d22c73bd1da48b71c96d2f354278653e9449fcc4e9c0fbb4df27ac1c2dec51df72ff68822f9b03e88fdc757065d62bec9ace
- SSDEEP 1536:2LsF2Kerc64sTiX2IV0DpK8SE9nYOzmEQkwpf:2Ly2Kerc64CiGIm1K851YO6EQkwpf
- TLSH T11F93A1763A259190C48BD178E8155AA0B932DCF52FF71303E6417AAC59B1E13CFAE8C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-14_d23f8f1c514e60dde321f221dcff25e7_elex_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_d23f8f1c514e60dde321f221dcff25e7_elex_wannacry.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_d23f8f1c514e60dde321f221dcff25e7_elex_wannacry
- Size 87KB
- SHA256 97ba9912f20485bde6873282d57c594898a3e49768d9450a004bc0872b0f1d4f
- MD5 d23f8f1c514e60dde321f221dcff25e7
- SHA1 503ac9f3186ad4e35510a3a051c83092f7818acb
- SHA512 26d0d2b41555cb19273a27455a88d22c73bd1da48b71c96d2f354278653e9449fcc4e9c0fbb4df27ac1c2dec51df72ff68822f9b03e88fdc757065d62bec9ace
- SSDEEP 1536:2LsF2Kerc64sTiX2IV0DpK8SE9nYOzmEQkwpf:2Ly2Kerc64CiGIm1K851YO6EQkwpf
- TLSH T11F93A1763A259190C48BD178E8155AA0B932DCF52FF71303E6417AAC59B1E13CFAE8C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1