General
- Target 2026-07-20_f3c99e625c589d0664115846eb9d1228_elex_wannacry
- Size 87KB
- Sample260720-ct72rscv5n
- SHA256 5870c0ed9cd07bc34c6ebda4f46e1dd3ff11aef5936644cda82cc189838bfbc3
- MD5 f3c99e625c589d0664115846eb9d1228
- SHA1 6cd673dce03ec35fd36c33b9d3ec8e98bda2dc4f
- SHA512 c42ce5f9b7c0ddf0bcb60e6c32c6fe1e3020878bd037686127b31ead177f38a27c241747164c0221a66ba14fef4f894607254cb3dd9ee6aea2310545ec790995
- SSDEEP 1536:2LsF2Kerc64sTiX2IV0DpK8SE9nYOzmEQkwpX:2Ly2Kerc64CiGIm1K851YO6EQkwpX
- TLSH T1A293A1763A259190C48BD138E8155AA0B932DCF52FF71303E7417AAC59B1E13CFAE8C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-20_f3c99e625c589d0664115846eb9d1228_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_f3c99e625c589d0664115846eb9d1228_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_f3c99e625c589d0664115846eb9d1228_elex_wannacry
- Size 87KB
- SHA256 5870c0ed9cd07bc34c6ebda4f46e1dd3ff11aef5936644cda82cc189838bfbc3
- MD5 f3c99e625c589d0664115846eb9d1228
- SHA1 6cd673dce03ec35fd36c33b9d3ec8e98bda2dc4f
- SHA512 c42ce5f9b7c0ddf0bcb60e6c32c6fe1e3020878bd037686127b31ead177f38a27c241747164c0221a66ba14fef4f894607254cb3dd9ee6aea2310545ec790995
- SSDEEP 1536:2LsF2Kerc64sTiX2IV0DpK8SE9nYOzmEQkwpX:2Ly2Kerc64CiGIm1K851YO6EQkwpX
- TLSH T1A293A1763A259190C48BD138E8155AA0B932DCF52FF71303E7417AAC59B1E13CFAE8C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1