General
- Target 2026-08-05_21241ebd224c0d519741ed1b9353c748_elex_wannacry
- Size 49KB
- Sample260805-trwpdswwas
- SHA256 a39812185d2dca1b9bc0c299771f37e35d51cef07f5c7d8fa1e8604eb77d731f
- MD5 21241ebd224c0d519741ed1b9353c748
- SHA1 e6f8db7bd646ccad569dc2fd5e39612bf96cf0ef
- SHA512 2a55ce64813a7e0f3c2ce39c070c316daff7762cc57fd1ddff50e06f74d0a9d37c74eb28189d21cf39e3a3100a26acb6b5242d8ce427c7fcbaee8f39fae0b4ed
- SSDEEP 1536:VLsF2Kerc64sTiX2IV0DhuD4p4kojVR6h2N:VLy2Kerc64CiGImVucp4kojWh2N
- TLSH T10F334C0A3BD550C2D56205B0EDAA0F35933BEC391127A75EA780765A1C72D6BCF30E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-05_21241ebd224c0d519741ed1b9353c748_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_21241ebd224c0d519741ed1b9353c748_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_21241ebd224c0d519741ed1b9353c748_elex_wannacry
- Size 49KB
- SHA256 a39812185d2dca1b9bc0c299771f37e35d51cef07f5c7d8fa1e8604eb77d731f
- MD5 21241ebd224c0d519741ed1b9353c748
- SHA1 e6f8db7bd646ccad569dc2fd5e39612bf96cf0ef
- SHA512 2a55ce64813a7e0f3c2ce39c070c316daff7762cc57fd1ddff50e06f74d0a9d37c74eb28189d21cf39e3a3100a26acb6b5242d8ce427c7fcbaee8f39fae0b4ed
- SSDEEP 1536:VLsF2Kerc64sTiX2IV0DhuD4p4kojVR6h2N:VLy2Kerc64CiGImVucp4kojWh2N
- TLSH T10F334C0A3BD550C2D56205B0EDAA0F35933BEC391127A75EA780765A1C72D6BCF30E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1