General
- Target 2026-08-01_8dc9bf65461a10309895ec6b12565475_elex_wannacry
- Size 42KB
- Sample260801-qme93abc24
- SHA256 c5fb7055d2f412a988683f0ff64e2618f474689f40115a20ed2a6362198a6cb5
- MD5 8dc9bf65461a10309895ec6b12565475
- SHA1 4ad60b53d9639938056e42a1ce0b5775b0746db7
- SHA512 61975c46f0a3b91045f08cd3336a22ecaf6cf3af8b325037c36aedc2508dcf1b831269ee987442f2b235f22af1cb9f39a57f21ac4c0f4ca0f6dc24e2df0c58e4
- SSDEEP 768:zNZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqPNPWQHXFMcnrfrqx4RgutbGHix8f41I:z/LsF2Kerc64sTiX2IV0DgsfrfWJF2+f
- TLSH T13E13171776A460D2CDB76074E91A4E30437E9CF664A7B317A72076202DB3D5ACFA02CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-01_8dc9bf65461a10309895ec6b12565475_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_8dc9bf65461a10309895ec6b12565475_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_8dc9bf65461a10309895ec6b12565475_elex_wannacry
- Size 42KB
- SHA256 c5fb7055d2f412a988683f0ff64e2618f474689f40115a20ed2a6362198a6cb5
- MD5 8dc9bf65461a10309895ec6b12565475
- SHA1 4ad60b53d9639938056e42a1ce0b5775b0746db7
- SHA512 61975c46f0a3b91045f08cd3336a22ecaf6cf3af8b325037c36aedc2508dcf1b831269ee987442f2b235f22af1cb9f39a57f21ac4c0f4ca0f6dc24e2df0c58e4
- SSDEEP 768:zNZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqPNPWQHXFMcnrfrqx4RgutbGHix8f41I:z/LsF2Kerc64sTiX2IV0DgsfrfWJF2+f
- TLSH T13E13171776A460D2CDB76074E91A4E30437E9CF664A7B317A72076202DB3D5ACFA02CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1