General
- Target 2026-08-12_438bab1cd0f88eba1362c14b76f5051e_elex_wannacry
- Size 50KB
- Sample260813-bprzbahl2t
- SHA256 243610817f51f3a0c4cedb130644081bfe9901a1da1f04f8eba4739404dbd616
- MD5 438bab1cd0f88eba1362c14b76f5051e
- SHA1 db3d77b685ca3cab8e615bc4c271e4db75cfca9f
- SHA512 180c488225111a2cfe482710e684598bf9e34e3855fec17e556fde4d75a56ff0d1986fcd68a677eddbb014a5d1c8372da1e1eeb471112204147c17a7052853ef
- SSDEEP 768:DZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqiNPWQHc8Sdq96AaWILO5:tLsF2Kerc64sTiX2IV0DpL8SE9nYO5
- TLSH T16233291A3B41E1D1C4A351B0EC5B4F74983AEDB58E276143BB85B70D1CB2A52CF7298E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-12_438bab1cd0f88eba1362c14b76f5051e_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_438bab1cd0f88eba1362c14b76f5051e_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_438bab1cd0f88eba1362c14b76f5051e_elex_wannacry
- Size 50KB
- SHA256 243610817f51f3a0c4cedb130644081bfe9901a1da1f04f8eba4739404dbd616
- MD5 438bab1cd0f88eba1362c14b76f5051e
- SHA1 db3d77b685ca3cab8e615bc4c271e4db75cfca9f
- SHA512 180c488225111a2cfe482710e684598bf9e34e3855fec17e556fde4d75a56ff0d1986fcd68a677eddbb014a5d1c8372da1e1eeb471112204147c17a7052853ef
- SSDEEP 768:DZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqiNPWQHc8Sdq96AaWILO5:tLsF2Kerc64sTiX2IV0DpL8SE9nYO5
- TLSH T16233291A3B41E1D1C4A351B0EC5B4F74983AEDB58E276143BB85B70D1CB2A52CF7298E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1