General
- Target 2026-07-29_bbfc250a35e71a7728eed1b16efc195c_elex_wannacry
- Size 94KB
- Sample260729-ydydaatvht
- SHA256 56bf9769b5dc939a65e37c97f34cb98b7e118ef4dcd24a34823b2b734bdd336d
- MD5 bbfc250a35e71a7728eed1b16efc195c
- SHA1 fb45790c041a6249dbcd74b92261e2256bde3312
- SHA512 d35f00ae8104beed28cdb58a4e4bf01ada9a3a9e35057a1b89b150bacfa349bd78a40f4a7f7b04a13cef32fc6d783f069486b22b0aace71012bea2b7579b49bd
- SSDEEP 1536:RLsF2Kerc64sTiX2IV0DxY8rqBLSaVl17oMvTbMvY4+oi9u6G6/Ni:RLy2Kerc64CiGImFYgUBWTb4/Ni
- TLSH T130937C2157A85153F0B246B0AD761B3098B97CB56AB3B21EBB03774D1871D21FF34B8A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-29_bbfc250a35e71a7728eed1b16efc195c_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_bbfc250a35e71a7728eed1b16efc195c_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_bbfc250a35e71a7728eed1b16efc195c_elex_wannacry
- Size 94KB
- SHA256 56bf9769b5dc939a65e37c97f34cb98b7e118ef4dcd24a34823b2b734bdd336d
- MD5 bbfc250a35e71a7728eed1b16efc195c
- SHA1 fb45790c041a6249dbcd74b92261e2256bde3312
- SHA512 d35f00ae8104beed28cdb58a4e4bf01ada9a3a9e35057a1b89b150bacfa349bd78a40f4a7f7b04a13cef32fc6d783f069486b22b0aace71012bea2b7579b49bd
- SSDEEP 1536:RLsF2Kerc64sTiX2IV0DxY8rqBLSaVl17oMvTbMvY4+oi9u6G6/Ni:RLy2Kerc64CiGImFYgUBWTb4/Ni
- TLSH T130937C2157A85153F0B246B0AD761B3098B97CB56AB3B21EBB03774D1871D21FF34B8A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1