General
- Target 2026-08-01_05a1f2086c1ff2736cf203aaea9439a6_elex_wannacry
- Size 48KB
- Sample260802-e1epxas1gy
- SHA256 87f0cc066949f1d772e9cab635253988357a17bb2926312edd7b3a90f1eb6eee
- MD5 05a1f2086c1ff2736cf203aaea9439a6
- SHA1 68023e2f6e720e752afaaec3bef9fcc7dab84b55
- SHA512 0b6508d1ad2161c7528641124d9186537557f7e3df5138924dce3bd8cd44b5fb6646d11a4a00e6ce38ab44cdb4a724c1f8e45e02f3a981b678e6f3e4a553f1e3
- SSDEEP 1536:bLsF2Kerc64sTiX2IV0DWvir2jaFBZ0/v8W:bLy2Kerc64CiGImav42j0O
- TLSH T168234A2EB5A26068C55390B0E9EA3E31D4357C75013B752AA700BB252E76E23CF77D8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-01_05a1f2086c1ff2736cf203aaea9439a6_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_05a1f2086c1ff2736cf203aaea9439a6_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_05a1f2086c1ff2736cf203aaea9439a6_elex_wannacry
- Size 48KB
- SHA256 87f0cc066949f1d772e9cab635253988357a17bb2926312edd7b3a90f1eb6eee
- MD5 05a1f2086c1ff2736cf203aaea9439a6
- SHA1 68023e2f6e720e752afaaec3bef9fcc7dab84b55
- SHA512 0b6508d1ad2161c7528641124d9186537557f7e3df5138924dce3bd8cd44b5fb6646d11a4a00e6ce38ab44cdb4a724c1f8e45e02f3a981b678e6f3e4a553f1e3
- SSDEEP 1536:bLsF2Kerc64sTiX2IV0DWvir2jaFBZ0/v8W:bLy2Kerc64CiGImav42j0O
- TLSH T168234A2EB5A26068C55390B0E9EA3E31D4357C75013B752AA700BB252E76E23CF77D8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1