General
- Target 2026-08-01_e2fb88986a12581a843bd1779cb24b68_elex_wannacry
- Size 69KB
- Sample260802-eezsystfma
- SHA256 11c676e8405e685b0661f4c356e676b635e835d39619e6f05ac53cd1de83a67e
- MD5 e2fb88986a12581a843bd1779cb24b68
- SHA1 31fd9164f38a28057322df2dc7c581d219bfcb0c
- SHA512 81cf6c3d3d89afa80e98deb64acb7be777380ef003f957bfbd5df8cb027d5a50642c73416d2787675323417f5b00626fb18d92c93dd7dd582e5b42f6bdbf77a5
- SSDEEP 1536:tLsF2Kerc64sTiX2IV0DpK8SE9nYOhoQ6YBwEM9w:tLy2Kerc64CiGIm1K851YOhqYBwEM9w
- TLSH T1AF63F70737A4A1E1D0A35270E8660B649B37ECB19A73A3077B94771D1DB2A41CF31B9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-01_e2fb88986a12581a843bd1779cb24b68_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_e2fb88986a12581a843bd1779cb24b68_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_e2fb88986a12581a843bd1779cb24b68_elex_wannacry
- Size 69KB
- SHA256 11c676e8405e685b0661f4c356e676b635e835d39619e6f05ac53cd1de83a67e
- MD5 e2fb88986a12581a843bd1779cb24b68
- SHA1 31fd9164f38a28057322df2dc7c581d219bfcb0c
- SHA512 81cf6c3d3d89afa80e98deb64acb7be777380ef003f957bfbd5df8cb027d5a50642c73416d2787675323417f5b00626fb18d92c93dd7dd582e5b42f6bdbf77a5
- SSDEEP 1536:tLsF2Kerc64sTiX2IV0DpK8SE9nYOhoQ6YBwEM9w:tLy2Kerc64CiGIm1K851YOhqYBwEM9w
- TLSH T1AF63F70737A4A1E1D0A35270E8660B649B37ECB19A73A3077B94771D1DB2A41CF31B9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1