General
- Target 2026-08-03_4012008d2e53ace46de797d398ed6c14_elex_wannacry
- Size 94KB
- Sample260803-la41fafn9z
- SHA256 93c54e959f9964d0c79de7695f466dd64919d79426181820e01715cf89a31605
- MD5 4012008d2e53ace46de797d398ed6c14
- SHA1 ff0abd0def503a53fce1c8d5b73854c8bb1a8d32
- SHA512 c5f53111380cc549e02ee3ddca9a8901a4bd3f6b0fa2a25d7f389453c324db0b6f87a11969deb2bc8d3a84bad998bb97f26d624fd8583964c943944f5b17278c
- SSDEEP 1536:RLsF2Kerc64sTiX2IV0DxY8rqBLSaVl17oMvTbMvY4+oi9u6G6/NF:RLy2Kerc64CiGImFYgUBWTb4/NF
- TLSH T11C937C2157A85153F0B246B0AD761B3098B97CB56AB3B21EBB03774D1871D21FF34B8A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-03_4012008d2e53ace46de797d398ed6c14_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_4012008d2e53ace46de797d398ed6c14_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_4012008d2e53ace46de797d398ed6c14_elex_wannacry
- Size 94KB
- SHA256 93c54e959f9964d0c79de7695f466dd64919d79426181820e01715cf89a31605
- MD5 4012008d2e53ace46de797d398ed6c14
- SHA1 ff0abd0def503a53fce1c8d5b73854c8bb1a8d32
- SHA512 c5f53111380cc549e02ee3ddca9a8901a4bd3f6b0fa2a25d7f389453c324db0b6f87a11969deb2bc8d3a84bad998bb97f26d624fd8583964c943944f5b17278c
- SSDEEP 1536:RLsF2Kerc64sTiX2IV0DxY8rqBLSaVl17oMvTbMvY4+oi9u6G6/NF:RLy2Kerc64CiGImFYgUBWTb4/NF
- TLSH T11C937C2157A85153F0B246B0AD761B3098B97CB56AB3B21EBB03774D1871D21FF34B8A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1