General
- Target 2026-08-01_ffffa322a7089a81f4b4e8665f74684d_elex_wannacry
- Size 48KB
- Sample260802-eccweateph
- SHA256 23955e817db0b01f6e33a0f81099be0b1efe5f0e93601df1448df873dfb40bc7
- MD5 ffffa322a7089a81f4b4e8665f74684d
- SHA1 a7ffc2d30263d8479744a8644430d2ece95834f6
- SHA512 1dd6e4e43f087247e8690eb96c743d98b5a2673c540637886aadf0881d9509174e9526f090dcaa12cdeae0385e2840a51c82d1d57d45f840653df3224e61630b
- SSDEEP 1536:bLsF2Kerc64sTiX2IV0DWvir2jaFBZ0/v8k:bLy2Kerc64CiGImav42j08
- TLSH T1C4234A2EB5A26068C55390B0E9EA3E31D4357C75013B752AA700BB252E76E23CF77D8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-01_ffffa322a7089a81f4b4e8665f74684d_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_ffffa322a7089a81f4b4e8665f74684d_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_ffffa322a7089a81f4b4e8665f74684d_elex_wannacry
- Size 48KB
- SHA256 23955e817db0b01f6e33a0f81099be0b1efe5f0e93601df1448df873dfb40bc7
- MD5 ffffa322a7089a81f4b4e8665f74684d
- SHA1 a7ffc2d30263d8479744a8644430d2ece95834f6
- SHA512 1dd6e4e43f087247e8690eb96c743d98b5a2673c540637886aadf0881d9509174e9526f090dcaa12cdeae0385e2840a51c82d1d57d45f840653df3224e61630b
- SSDEEP 1536:bLsF2Kerc64sTiX2IV0DWvir2jaFBZ0/v8k:bLy2Kerc64CiGImav42j08
- TLSH T1C4234A2EB5A26068C55390B0E9EA3E31D4357C75013B752AA700BB252E76E23CF77D8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1