General
- Target 2026-08-02_6213d3e0025b4176f55b79513466aa94_elex_wannacry
- Size 30KB
- Sample260802-1lcgwssdrb
- SHA256 3119ebde0037367fe9cbf9577bc2a814e2f10722e95512d00357da44834a98e9
- MD5 6213d3e0025b4176f55b79513466aa94
- SHA1 25df1030c3d5aee844bb1a678cfaf0f8832f9cf0
- SHA512 32602f65e2352f6786232f64ed841eb2b8c6dcc9374f18d8fa2a84858fe8c995a28a5fa12fddb79c9e63130db6cb08b56c03d4092e107a4296f352a1abdbb09c
- SSDEEP 768:qZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqkkzNPWQHrR:OLsF2Kerc64sTiX2IV0DkFMR
- TLSH T187E27D2E3EA28053C5D700F0E9A92F78C97E953B2569A05BCB400D4D3CF1D65DAB1E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-02_6213d3e0025b4176f55b79513466aa94_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_6213d3e0025b4176f55b79513466aa94_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_6213d3e0025b4176f55b79513466aa94_elex_wannacry
- Size 30KB
- SHA256 3119ebde0037367fe9cbf9577bc2a814e2f10722e95512d00357da44834a98e9
- MD5 6213d3e0025b4176f55b79513466aa94
- SHA1 25df1030c3d5aee844bb1a678cfaf0f8832f9cf0
- SHA512 32602f65e2352f6786232f64ed841eb2b8c6dcc9374f18d8fa2a84858fe8c995a28a5fa12fddb79c9e63130db6cb08b56c03d4092e107a4296f352a1abdbb09c
- SSDEEP 768:qZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqkkzNPWQHrR:OLsF2Kerc64sTiX2IV0DkFMR
- TLSH T187E27D2E3EA28053C5D700F0E9A92F78C97E953B2569A05BCB400D4D3CF1D65DAB1E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1