General
- Target 2026-08-09_18703f41c4c1c1796d2389c8c495d5e8_elex_wannacry
- Size 49KB
- Sample260809-es3f1ahk51
- SHA256 c0ab872dd6d4ccccd06d031229452b53119336e2555cf805cab431c060ff11e8
- MD5 18703f41c4c1c1796d2389c8c495d5e8
- SHA1 f561b710b60821864ba3dc41d5dcdde5b8fe181c
- SHA512 c1bfcdc9c9f989a95485fc09002e5ef68363da268d307eca490be8b8ba8bc4b8e66d23ab43108828341337b2d40bf373f0850b10089d900a8a5f7654485686c8
- SSDEEP 1536:4LsF2Kerc64sTiX2IV0Dhuj4p4kojVR6h2A:4Ly2Kerc64CiGImVu8p4kojWh2A
- TLSH T1B8334C0A2BD650C2D56205B0E99A0F75833FDC3A2127A75EE740765A1C72D6BCF30E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-09_18703f41c4c1c1796d2389c8c495d5e8_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_18703f41c4c1c1796d2389c8c495d5e8_elex_wannacry.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_18703f41c4c1c1796d2389c8c495d5e8_elex_wannacry
- Size 49KB
- SHA256 c0ab872dd6d4ccccd06d031229452b53119336e2555cf805cab431c060ff11e8
- MD5 18703f41c4c1c1796d2389c8c495d5e8
- SHA1 f561b710b60821864ba3dc41d5dcdde5b8fe181c
- SHA512 c1bfcdc9c9f989a95485fc09002e5ef68363da268d307eca490be8b8ba8bc4b8e66d23ab43108828341337b2d40bf373f0850b10089d900a8a5f7654485686c8
- SSDEEP 1536:4LsF2Kerc64sTiX2IV0Dhuj4p4kojVR6h2A:4Ly2Kerc64CiGImVu8p4kojWh2A
- TLSH T1B8334C0A2BD650C2D56205B0E99A0F75833FDC3A2127A75EE740765A1C72D6BCF30E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1