General
- Target 2026-08-11_dfd91e0f943ca2913d9c97350b9758ea_elex_wannacry
- Size 88KB
- Sample260811-ffvq3a1zcs
- SHA256 66d4b3bbc33542659de3769b290c13ccbc2daec0628a4cb31a8eb1f27000e7ad
- MD5 dfd91e0f943ca2913d9c97350b9758ea
- SHA1 df4e03cf9bfa896b4e166964f483a406aec87f70
- SHA512 4f11bc6bdfa866b76b6d794eac30dd32151b99bae295d6e7ce0ee5b14d4a821e90b7eda50d1022e9be2358ad3a04a41dedc93d625b6e94e74cde324550fb4673
- SSDEEP 1536:5LsF2Kerc64sTiX2IV0DVk2Lbuzc/9yH8Ky9193jiT5l364KlVk937tgrw:5Ly2Kerc64CiGImRRLyzc/9yH8Ka1934
- TLSH T1D2934A8F73251205D9770979A2052F19AC3DADE78357A04CA7C4B1693833D3ACB3F6A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-11_dfd91e0f943ca2913d9c97350b9758ea_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_dfd91e0f943ca2913d9c97350b9758ea_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_dfd91e0f943ca2913d9c97350b9758ea_elex_wannacry
- Size 88KB
- SHA256 66d4b3bbc33542659de3769b290c13ccbc2daec0628a4cb31a8eb1f27000e7ad
- MD5 dfd91e0f943ca2913d9c97350b9758ea
- SHA1 df4e03cf9bfa896b4e166964f483a406aec87f70
- SHA512 4f11bc6bdfa866b76b6d794eac30dd32151b99bae295d6e7ce0ee5b14d4a821e90b7eda50d1022e9be2358ad3a04a41dedc93d625b6e94e74cde324550fb4673
- SSDEEP 1536:5LsF2Kerc64sTiX2IV0DVk2Lbuzc/9yH8Ky9193jiT5l364KlVk937tgrw:5Ly2Kerc64CiGImRRLyzc/9yH8Ka1934
- TLSH T1D2934A8F73251205D9770979A2052F19AC3DADE78357A04CA7C4B1693833D3ACB3F6A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1