General
- Target 2026-08-04_b68930423488d429ce7e4be79c3bc660_elex_wannacry
- Size 42KB
- Sample260804-rtrgcacc52
- SHA256 df591bc0e2a757a56be5f81de466f8ef4a5bc7b78643e5ec7a1d2fba86a506f1
- MD5 b68930423488d429ce7e4be79c3bc660
- SHA1 456a4079d0e69dc9093eb590a6a39e996f3c2af8
- SHA512 1fb4555a85075e5fca6e1a9e04b09db5aef6f46a40f5b9b9f3880f3986ce7fb25ac40d0956888047e4f4ea461c338b4844dd968661e67c92c936bcc149edb3fa
- SSDEEP 768:zNZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqPNPWQHXFMcnrfrqx4RgutbGHix8f41Q:z/LsF2Kerc64sTiX2IV0DgsfrfWJF2+T
- TLSH T13F13171776A460D2CDB76074E91A4E30437E9CF664A7B317A72076202DB3D5ACFA02CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-04_b68930423488d429ce7e4be79c3bc660_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_b68930423488d429ce7e4be79c3bc660_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_b68930423488d429ce7e4be79c3bc660_elex_wannacry
- Size 42KB
- SHA256 df591bc0e2a757a56be5f81de466f8ef4a5bc7b78643e5ec7a1d2fba86a506f1
- MD5 b68930423488d429ce7e4be79c3bc660
- SHA1 456a4079d0e69dc9093eb590a6a39e996f3c2af8
- SHA512 1fb4555a85075e5fca6e1a9e04b09db5aef6f46a40f5b9b9f3880f3986ce7fb25ac40d0956888047e4f4ea461c338b4844dd968661e67c92c936bcc149edb3fa
- SSDEEP 768:zNZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqPNPWQHXFMcnrfrqx4RgutbGHix8f41Q:z/LsF2Kerc64sTiX2IV0DgsfrfWJF2+T
- TLSH T13F13171776A460D2CDB76074E91A4E30437E9CF664A7B317A72076202DB3D5ACFA02CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1