General
- Target 2026-08-03_d1294238f5129042ea1f1046e28e20a0_elex_wannacry
- Size 94KB
- Sample260804-ljtwtsswaz
- SHA256 1ce39fdf65e34b9e6af875ada1592fc30ed89c6ae408529f7863999685a98923
- MD5 d1294238f5129042ea1f1046e28e20a0
- SHA1 cb8c1c61b009a5810475f71d5346059a80e9aaf2
- SHA512 629036b9f4a0dcf985c906c329b401f87dd4452fb6441d525f6023f2dd8963fc0082e29acbfa35796f3645bb07e18cd94295658137a419f907cab9d5cdf11570
- SSDEEP 1536:RLsF2Kerc64sTiX2IV0DxY8rqBLSaVl17oMvTbMvY4+oi9u6G6/NQ:RLy2Kerc64CiGImFYgUBWTb4/NQ
- TLSH T144937C2157A85153F0B246B0AD761B3098B97CB56AB3B21EBB03774D1871D21FF34B8A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-03_d1294238f5129042ea1f1046e28e20a0_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_d1294238f5129042ea1f1046e28e20a0_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_d1294238f5129042ea1f1046e28e20a0_elex_wannacry
- Size 94KB
- SHA256 1ce39fdf65e34b9e6af875ada1592fc30ed89c6ae408529f7863999685a98923
- MD5 d1294238f5129042ea1f1046e28e20a0
- SHA1 cb8c1c61b009a5810475f71d5346059a80e9aaf2
- SHA512 629036b9f4a0dcf985c906c329b401f87dd4452fb6441d525f6023f2dd8963fc0082e29acbfa35796f3645bb07e18cd94295658137a419f907cab9d5cdf11570
- SSDEEP 1536:RLsF2Kerc64sTiX2IV0DxY8rqBLSaVl17oMvTbMvY4+oi9u6G6/NQ:RLy2Kerc64CiGImFYgUBWTb4/NQ
- TLSH T144937C2157A85153F0B246B0AD761B3098B97CB56AB3B21EBB03774D1871D21FF34B8A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1