General
- Target 2026-08-04_2f4c8e44d15b3fd267924584bc704953_elex_wannacry
- Size 56KB
- Sample260804-trhgrsaj7z
- SHA256 5016dc21f85e519dc2f19ed3f7ed47559ec6fd6428ea99e1e003cc517a2116d3
- MD5 2f4c8e44d15b3fd267924584bc704953
- SHA1 39da27c18a2f72a7230e04f097dc5a7572e55429
- SHA512 5320f095723fee80b1b330c897fddc9b9e44adf87bf0d96e0406198cf92d3752d473350b5b9317d57d09801f35b03047c6bca9ce834030d1f25c892b6028e181
- SSDEEP 1536:PLsF2Kerc64sTiX2IV0DeRa8OKFVG9WGWX:PLy2Kerc64CiGImqRa8OKFE9WBX
- TLSH T1214319277AE55CD2C15360F0EAE49B308038FD7219279023E794BB9816BEC92DF7169D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-04_2f4c8e44d15b3fd267924584bc704953_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_2f4c8e44d15b3fd267924584bc704953_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_2f4c8e44d15b3fd267924584bc704953_elex_wannacry
- Size 56KB
- SHA256 5016dc21f85e519dc2f19ed3f7ed47559ec6fd6428ea99e1e003cc517a2116d3
- MD5 2f4c8e44d15b3fd267924584bc704953
- SHA1 39da27c18a2f72a7230e04f097dc5a7572e55429
- SHA512 5320f095723fee80b1b330c897fddc9b9e44adf87bf0d96e0406198cf92d3752d473350b5b9317d57d09801f35b03047c6bca9ce834030d1f25c892b6028e181
- SSDEEP 1536:PLsF2Kerc64sTiX2IV0DeRa8OKFVG9WGWX:PLy2Kerc64CiGImqRa8OKFE9WBX
- TLSH T1214319277AE55CD2C15360F0EAE49B308038FD7219279023E794BB9816BEC92DF7169D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1