General
- Target 2026-08-04_f1878d9189d01f5142be68320f0db61c_elex_wannacry
- Size 30KB
- Sample260804-qsp2fsfp6y
- SHA256 659d5e096d2771a1af2f37a3099cc5782766b65118c836e1216a9ef6d83473b3
- MD5 f1878d9189d01f5142be68320f0db61c
- SHA1 37c4e48a88551d4feca94009494841fecc6aeb7e
- SHA512 6701c145f3ce812bf70e48dd67b445f44f0d055efe2a4d0bb893c5393424896b66391a421aeb7c00546b08fdbb1a5ff0081a202a5869b1f94b6525c0b9828899
- SSDEEP 768:qZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqkkzNPWQHrJ:OLsF2Kerc64sTiX2IV0DkFMJ
- TLSH T10DE27D2E3EA28053C5D700F0E9A91F78C97E953B2569A05BCB400D4D3CF1D65DAB1E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-04_f1878d9189d01f5142be68320f0db61c_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_f1878d9189d01f5142be68320f0db61c_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_f1878d9189d01f5142be68320f0db61c_elex_wannacry
- Size 30KB
- SHA256 659d5e096d2771a1af2f37a3099cc5782766b65118c836e1216a9ef6d83473b3
- MD5 f1878d9189d01f5142be68320f0db61c
- SHA1 37c4e48a88551d4feca94009494841fecc6aeb7e
- SHA512 6701c145f3ce812bf70e48dd67b445f44f0d055efe2a4d0bb893c5393424896b66391a421aeb7c00546b08fdbb1a5ff0081a202a5869b1f94b6525c0b9828899
- SSDEEP 768:qZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqkkzNPWQHrJ:OLsF2Kerc64sTiX2IV0DkFMJ
- TLSH T10DE27D2E3EA28053C5D700F0E9A91F78C97E953B2569A05BCB400D4D3CF1D65DAB1E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1