General
- Target 2026-08-05_ef0e2001cb05e5909d1294e278759156_elex_wannacry
- Size 39KB
- Sample260805-3qmvjaycpc
- SHA256 20ad602172aa860480de6fc8b2bdb2455e307b63aa722fe3272a1d6e8a0b61a3
- MD5 ef0e2001cb05e5909d1294e278759156
- SHA1 574b5b897339596a46a5c21f63f5bc6fddd3c955
- SHA512 5099c734bd30cac9c51317d72217fd9d9109685519bfe27bf79d21301033edb14843a275f615b79fef022848aab53a35c6b684cbf9dcdf8abd4e44c4072f2760
- SSDEEP 768:uZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqGNPWQHV6+UGNSyxSB3:aLsF2Kerc64sTiX2IV0DVyIGFg
- TLSH T154036B1B2964B062C69611B0F8696F34C03DADB4052BF052F7447B992CB6DA3DF71ACE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-05_ef0e2001cb05e5909d1294e278759156_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_ef0e2001cb05e5909d1294e278759156_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_ef0e2001cb05e5909d1294e278759156_elex_wannacry
- Size 39KB
- SHA256 20ad602172aa860480de6fc8b2bdb2455e307b63aa722fe3272a1d6e8a0b61a3
- MD5 ef0e2001cb05e5909d1294e278759156
- SHA1 574b5b897339596a46a5c21f63f5bc6fddd3c955
- SHA512 5099c734bd30cac9c51317d72217fd9d9109685519bfe27bf79d21301033edb14843a275f615b79fef022848aab53a35c6b684cbf9dcdf8abd4e44c4072f2760
- SSDEEP 768:uZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqGNPWQHV6+UGNSyxSB3:aLsF2Kerc64sTiX2IV0DVyIGFg
- TLSH T154036B1B2964B062C69611B0F8696F34C03DADB4052BF052F7447B992CB6DA3DF71ACE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1