General
- Target 2026-07-17_c9fe10c30d068910c49f032a1bfe7c5f_elex_wannacry
- Size 56KB
- Sample260718-cjnkdacy4r
- SHA256 686e028c8243b1538f8403f6dffb9cca2353adef24290ac17a9d84341abdd7bd
- MD5 c9fe10c30d068910c49f032a1bfe7c5f
- SHA1 7ec1495b2fde17296bb1e45aca604c0143cc7d95
- SHA512 b9051d708ea2bfafaed0b16761be5710d1ff2edb46c34d2a0d5dd306e3c8606f3ed92fe26ac862cca194d66d37b9e9b2af759a63ef7ae370bb684a152dd1bb57
- SSDEEP 1536:PLsF2Kerc64sTiX2IV0DeRa8OKFVG9WGWM:PLy2Kerc64CiGImqRa8OKFE9WBM
- TLSH T1FC4319277AE55CD2C15360F0EAE49B308038FD7219279023E794BB9816BEC92DF7169D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-17_c9fe10c30d068910c49f032a1bfe7c5f_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_c9fe10c30d068910c49f032a1bfe7c5f_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_c9fe10c30d068910c49f032a1bfe7c5f_elex_wannacry
- Size 56KB
- SHA256 686e028c8243b1538f8403f6dffb9cca2353adef24290ac17a9d84341abdd7bd
- MD5 c9fe10c30d068910c49f032a1bfe7c5f
- SHA1 7ec1495b2fde17296bb1e45aca604c0143cc7d95
- SHA512 b9051d708ea2bfafaed0b16761be5710d1ff2edb46c34d2a0d5dd306e3c8606f3ed92fe26ac862cca194d66d37b9e9b2af759a63ef7ae370bb684a152dd1bb57
- SSDEEP 1536:PLsF2Kerc64sTiX2IV0DeRa8OKFVG9WGWM:PLy2Kerc64CiGImqRa8OKFE9WBM
- TLSH T1FC4319277AE55CD2C15360F0EAE49B308038FD7219279023E794BB9816BEC92DF7169D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1