General
- Target 2026-08-02_c6b1da1fc7ee1bedc8e4b1c717930505_elex_wannacry
- Size 53KB
- Sample260802-mwkdlahj6t
- SHA256 65b844137984ad10b178df76792438651a056dfc7c5d558e4e779bbcce627d95
- MD5 c6b1da1fc7ee1bedc8e4b1c717930505
- SHA1 3a4d536bf2423b9a4644cfbbeb7adbaad6954c10
- SHA512 c3c53fb800157ab90ec8fc21be287dbea35b1946dce915403214ae9f2dfe780aec51d2892c277c2f4e83be7e0538c2cf3f4bcab61d2206d88f3e8af52ead337b
- SSDEEP 1536:3LsF2Kerc64sTiX2IV0D5tcz9Kf8pOOq27:3Ly2Kerc64CiGIm1tcBMUOOF7
- TLSH T19C335C176A459056C0BB52B0FC884F30823AADB405B7B213B349B65D1CB2E52DFB1DBE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-02_c6b1da1fc7ee1bedc8e4b1c717930505_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_c6b1da1fc7ee1bedc8e4b1c717930505_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_c6b1da1fc7ee1bedc8e4b1c717930505_elex_wannacry
- Size 53KB
- SHA256 65b844137984ad10b178df76792438651a056dfc7c5d558e4e779bbcce627d95
- MD5 c6b1da1fc7ee1bedc8e4b1c717930505
- SHA1 3a4d536bf2423b9a4644cfbbeb7adbaad6954c10
- SHA512 c3c53fb800157ab90ec8fc21be287dbea35b1946dce915403214ae9f2dfe780aec51d2892c277c2f4e83be7e0538c2cf3f4bcab61d2206d88f3e8af52ead337b
- SSDEEP 1536:3LsF2Kerc64sTiX2IV0D5tcz9Kf8pOOq27:3Ly2Kerc64CiGIm1tcBMUOOF7
- TLSH T19C335C176A459056C0BB52B0FC884F30823AADB405B7B213B349B65D1CB2E52DFB1DBE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1