General
- Target 2026-07-22_671c300a5d61a6bfb99989b58c0a1c46_elex_wannacry
- Size 49KB
- Sample260722-fqe4csv1hw
- SHA256 faaa2c9032f94934143c91df54c55b05a38d21171217d829a5d16357a50e8e25
- MD5 671c300a5d61a6bfb99989b58c0a1c46
- SHA1 859145e9268b52de9ac1a68b73baa96d3df431c6
- SHA512 3bd80837e09881a9045210703b7ddc1d6c0f5bc579ff043f8138d6aee884046a1d308b619b880b1a7662a2bd37891d2112ef402e12472d02fc9809b8b2693869
- SSDEEP 1536:VLsF2Kerc64sTiX2IV0DhuD4p4kojVR6h2D:VLy2Kerc64CiGImVucp4kojWh2D
- TLSH T121334C0A3BD550C2D56205B0EDAA0F35933BEC391127A75EA780765A1C72D6BCF30E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-22_671c300a5d61a6bfb99989b58c0a1c46_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_671c300a5d61a6bfb99989b58c0a1c46_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_671c300a5d61a6bfb99989b58c0a1c46_elex_wannacry
- Size 49KB
- SHA256 faaa2c9032f94934143c91df54c55b05a38d21171217d829a5d16357a50e8e25
- MD5 671c300a5d61a6bfb99989b58c0a1c46
- SHA1 859145e9268b52de9ac1a68b73baa96d3df431c6
- SHA512 3bd80837e09881a9045210703b7ddc1d6c0f5bc579ff043f8138d6aee884046a1d308b619b880b1a7662a2bd37891d2112ef402e12472d02fc9809b8b2693869
- SSDEEP 1536:VLsF2Kerc64sTiX2IV0DhuD4p4kojVR6h2D:VLy2Kerc64CiGImVucp4kojWh2D
- TLSH T121334C0A3BD550C2D56205B0EDAA0F35933BEC391127A75EA780765A1C72D6BCF30E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1