General
- Target 2026-07-31_8b0d1d0743ef4d7b4a5d40cef9ea9edf_elex_wannacry
- Size 30KB
- Sample260731-nmqppasala
- SHA256 4d72b6e606c6953998c1d05a96655ff7cf079d02a9a32d6cf4a2295e940e1e98
- MD5 8b0d1d0743ef4d7b4a5d40cef9ea9edf
- SHA1 dc9c232c70164a084150e07798d844ad9966a422
- SHA512 c56e954b78175afcab0f0b2595f86e5d0d37c815752e5e094a34c5679986f950818f95d4ab465d3616a5393a2c6591512bd24300e5df83007bef9858218377e2
- SSDEEP 768:DZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqz/eNPWQHXA:tLsF2Kerc64sTiX2IV0DzloA
- TLSH T16DE26C3B7EF58052CAD701F0E9692F39C97E913A15299056DB800E4D2CB1DA2DBB1F4E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-31_8b0d1d0743ef4d7b4a5d40cef9ea9edf_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_8b0d1d0743ef4d7b4a5d40cef9ea9edf_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_8b0d1d0743ef4d7b4a5d40cef9ea9edf_elex_wannacry
- Size 30KB
- SHA256 4d72b6e606c6953998c1d05a96655ff7cf079d02a9a32d6cf4a2295e940e1e98
- MD5 8b0d1d0743ef4d7b4a5d40cef9ea9edf
- SHA1 dc9c232c70164a084150e07798d844ad9966a422
- SHA512 c56e954b78175afcab0f0b2595f86e5d0d37c815752e5e094a34c5679986f950818f95d4ab465d3616a5393a2c6591512bd24300e5df83007bef9858218377e2
- SSDEEP 768:DZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqz/eNPWQHXA:tLsF2Kerc64sTiX2IV0DzloA
- TLSH T16DE26C3B7EF58052CAD701F0E9692F39C97E913A15299056DB800E4D2CB1DA2DBB1F4E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1