General
- Target 2026-08-01_24a31e28415aa14d00ef9c51f8ee4468_elex_wannacry
- Size 48KB
- Sample260802-bhvrmabj8y
- SHA256 e413f43b76079e08d0220b4d51be28d89b52ca58ac74932d5d9313f7659637d5
- MD5 24a31e28415aa14d00ef9c51f8ee4468
- SHA1 d63117ad16aa80807d08aaee72d5d0e8af047576
- SHA512 d676892348d47627ed2a4d72988a723ca30c18d9a60e85a7b7cc439c997f66982308fcde0df96df847f2384460d3187cf1ef407fd18b1d508f382f954847fbc0
- SSDEEP 1536:bLsF2Kerc64sTiX2IV0DWvir2jaFBZ0/v8E:bLy2Kerc64CiGImav42j08
- TLSH T126234A2EB5A26068C55390B0E9EA3E31D4357C75013B752AA700BB252E76E23CF77D8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-01_24a31e28415aa14d00ef9c51f8ee4468_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_24a31e28415aa14d00ef9c51f8ee4468_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_24a31e28415aa14d00ef9c51f8ee4468_elex_wannacry
- Size 48KB
- SHA256 e413f43b76079e08d0220b4d51be28d89b52ca58ac74932d5d9313f7659637d5
- MD5 24a31e28415aa14d00ef9c51f8ee4468
- SHA1 d63117ad16aa80807d08aaee72d5d0e8af047576
- SHA512 d676892348d47627ed2a4d72988a723ca30c18d9a60e85a7b7cc439c997f66982308fcde0df96df847f2384460d3187cf1ef407fd18b1d508f382f954847fbc0
- SSDEEP 1536:bLsF2Kerc64sTiX2IV0DWvir2jaFBZ0/v8E:bLy2Kerc64CiGImav42j08
- TLSH T126234A2EB5A26068C55390B0E9EA3E31D4357C75013B752AA700BB252E76E23CF77D8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1