General
- Target 2026-08-04_99babe0cad50bbe0004c83e9eabff45a_elex_wannacry
- Size 69KB
- Sample260804-xtfbzafe66
- SHA256 a9182946b7e3c6dab025eb33678379144d3daae3ac6f8cbfaef5a0a1c86b758f
- MD5 99babe0cad50bbe0004c83e9eabff45a
- SHA1 6398eabe8aeea98bb69b29c758a2ef38e387625a
- SHA512 1b9ed1ca492c3f430727e5aa0a9cc026d74875f61e668352430bf49d335a16eb9a8f787935f1ed0e51c4bbb771167f4c5c51a7704d8188bd90f4e398a0635a4d
- SSDEEP 1536:tLsF2Kerc64sTiX2IV0DpK8SE9nYOhoQ6YBwEM9U:tLy2Kerc64CiGIm1K851YOhqYBwEM9U
- TLSH T19D63F70737A4A1E1D0A35270E8660B649B37ECB19A73A3077B94771D1DB2A41CF31B9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-04_99babe0cad50bbe0004c83e9eabff45a_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_99babe0cad50bbe0004c83e9eabff45a_elex_wannacry.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_99babe0cad50bbe0004c83e9eabff45a_elex_wannacry
- Size 69KB
- SHA256 a9182946b7e3c6dab025eb33678379144d3daae3ac6f8cbfaef5a0a1c86b758f
- MD5 99babe0cad50bbe0004c83e9eabff45a
- SHA1 6398eabe8aeea98bb69b29c758a2ef38e387625a
- SHA512 1b9ed1ca492c3f430727e5aa0a9cc026d74875f61e668352430bf49d335a16eb9a8f787935f1ed0e51c4bbb771167f4c5c51a7704d8188bd90f4e398a0635a4d
- SSDEEP 1536:tLsF2Kerc64sTiX2IV0DpK8SE9nYOhoQ6YBwEM9U:tLy2Kerc64CiGIm1K851YOhqYBwEM9U
- TLSH T19D63F70737A4A1E1D0A35270E8660B649B37ECB19A73A3077B94771D1DB2A41CF31B9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1