General
- Target 2026-07-29_a00937ce1d37d6662a748d6fcbe7e66e_elex_wannacry
- Size 49KB
- Sample260729-2bth4afg85
- SHA256 fd6f22f188909e01ad71bccdb313a174a51f483fe9c9fcaa5e3ba71f1c8dd152
- MD5 a00937ce1d37d6662a748d6fcbe7e66e
- SHA1 6abe46d487ec86e80bb0bb7789a3d5c184dd1397
- SHA512 02daf29279ff7d1b154a26363729cf78a2f9d05cc143f619b294bcb8a049d7d93819591e6271d812d8e8eaf7533782adab0448d14525e3e319f27c1343526adc
- SSDEEP 1536:VLsF2Kerc64sTiX2IV0DhuD4p4kojVR6h2t:VLy2Kerc64CiGImVucp4kojWh2t
- TLSH T170334C0A3BD550C2D56205B0EDAA0F35933BEC391127A75EA780765A1C72D6BCF30E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-29_a00937ce1d37d6662a748d6fcbe7e66e_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_a00937ce1d37d6662a748d6fcbe7e66e_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_a00937ce1d37d6662a748d6fcbe7e66e_elex_wannacry
- Size 49KB
- SHA256 fd6f22f188909e01ad71bccdb313a174a51f483fe9c9fcaa5e3ba71f1c8dd152
- MD5 a00937ce1d37d6662a748d6fcbe7e66e
- SHA1 6abe46d487ec86e80bb0bb7789a3d5c184dd1397
- SHA512 02daf29279ff7d1b154a26363729cf78a2f9d05cc143f619b294bcb8a049d7d93819591e6271d812d8e8eaf7533782adab0448d14525e3e319f27c1343526adc
- SSDEEP 1536:VLsF2Kerc64sTiX2IV0DhuD4p4kojVR6h2t:VLy2Kerc64CiGImVucp4kojWh2t
- TLSH T170334C0A3BD550C2D56205B0EDAA0F35933BEC391127A75EA780765A1C72D6BCF30E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1