General
- Target 2026-08-01_f3735c5c7352762a6601d28c3477c7af_elex_wannacry
- Size 47KB
- Sample260801-pmfedsyzht
- SHA256 afe74939b3eae29952ad619982613835e7d94c6034db951ba9a9987f0750508c
- MD5 f3735c5c7352762a6601d28c3477c7af
- SHA1 eeb4f38ad1ea5b171ec5884b8cc3d14c25f61eb1
- SHA512 c6f458d5e2b7f03e7ff3f15667450a81ffd533f96b742e9fb2dbdaa2d7c8ba300ef1ca987515d7de12a1c3c98fa28f1523aa020f4b3ac5b8ca7f8d5ceec25091
- SSDEEP 768:tyZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqZNPWQHmgyFIvA0vqxet2dMINJN:t2LsF2Kerc64sTiX2IV0DOlgy6vlvqxT
- TLSH T1D5235B173EA520C1D6D610B0EAA90F78843DEDB50127A152F780B65D2CB6E62DF71ECE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-01_f3735c5c7352762a6601d28c3477c7af_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_f3735c5c7352762a6601d28c3477c7af_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_f3735c5c7352762a6601d28c3477c7af_elex_wannacry
- Size 47KB
- SHA256 afe74939b3eae29952ad619982613835e7d94c6034db951ba9a9987f0750508c
- MD5 f3735c5c7352762a6601d28c3477c7af
- SHA1 eeb4f38ad1ea5b171ec5884b8cc3d14c25f61eb1
- SHA512 c6f458d5e2b7f03e7ff3f15667450a81ffd533f96b742e9fb2dbdaa2d7c8ba300ef1ca987515d7de12a1c3c98fa28f1523aa020f4b3ac5b8ca7f8d5ceec25091
- SSDEEP 768:tyZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqZNPWQHmgyFIvA0vqxet2dMINJN:t2LsF2Kerc64sTiX2IV0DOlgy6vlvqxT
- TLSH T1D5235B173EA520C1D6D610B0EAA90F78843DEDB50127A152F780B65D2CB6E62DF71ECE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1