General
- Target 2026-07-16_d8b39bf5f4ac3c821398b02a7d1de577_elex_wannacry
- Size 87KB
- Sample260716-c69fcsbv9k
- SHA256 497a648fb0d9c1390e7472bc077cf736ecb949dec36ded38638035c30596dec0
- MD5 d8b39bf5f4ac3c821398b02a7d1de577
- SHA1 75a3395cccce2a9a112aa5e857fa1fd6891967d9
- SHA512 79734f9e22002d3d0527098353fcae92bb74321d16f9db58d09cfb89446c2aa9d74af17566acffe77d1dd0d9251c0e6fa3c6627bace912a116ff7e282d931053
- SSDEEP 1536:2LsF2Kerc64sTiX2IV0DpK8SE9nYOzmEQkwpn:2Ly2Kerc64CiGIm1K851YO6EQkwpn
- TLSH T1CB93A1763A259190C48BD178E8155AA0B932DCF52FF71303E6417AAC59B1E13CFAE8C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-16_d8b39bf5f4ac3c821398b02a7d1de577_elex_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-16_d8b39bf5f4ac3c821398b02a7d1de577_elex_wannacry.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-16_d8b39bf5f4ac3c821398b02a7d1de577_elex_wannacry
- Size 87KB
- SHA256 497a648fb0d9c1390e7472bc077cf736ecb949dec36ded38638035c30596dec0
- MD5 d8b39bf5f4ac3c821398b02a7d1de577
- SHA1 75a3395cccce2a9a112aa5e857fa1fd6891967d9
- SHA512 79734f9e22002d3d0527098353fcae92bb74321d16f9db58d09cfb89446c2aa9d74af17566acffe77d1dd0d9251c0e6fa3c6627bace912a116ff7e282d931053
- SSDEEP 1536:2LsF2Kerc64sTiX2IV0DpK8SE9nYOzmEQkwpn:2Ly2Kerc64CiGIm1K851YO6EQkwpn
- TLSH T1CB93A1763A259190C48BD178E8155AA0B932DCF52FF71303E6417AAC59B1E13CFAE8C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1