General
- Target 2026-08-13_4a9bd6040399724f6f16ec9196f0e578_elex_wannacry
- Size 95KB
- Sample260813-ssramabp4s
- SHA256 3b17f2a3ebb5dd31eff24a7277699b0202864e622a8af7886389275229aab421
- MD5 4a9bd6040399724f6f16ec9196f0e578
- SHA1 1e05f4dbfb69157074e7ded18ac90ba609d39a0e
- SHA512 750e2db4e376a7cbacb32c7846835b6db0119fca675149213e5a57807fafffe6968a5eb759b876e9f4fd9c32bda2f8713576cb8760170ef883bc551e8a7636f2
- SSDEEP 1536:JLsF2Kerc64sTiX2IV0DXJrdShIPoANJLlAXuSXv+qSFEAeOFNk:JLy2Kerc64CiGIm7JrshIPFJRAhP2EAQ
- TLSH T1E193CF167B986052D88A0470CA7F4F3584397C791426E213B3D27A1F2DB2A52EF73ADD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-13_4a9bd6040399724f6f16ec9196f0e578_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_4a9bd6040399724f6f16ec9196f0e578_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_4a9bd6040399724f6f16ec9196f0e578_elex_wannacry
- Size 95KB
- SHA256 3b17f2a3ebb5dd31eff24a7277699b0202864e622a8af7886389275229aab421
- MD5 4a9bd6040399724f6f16ec9196f0e578
- SHA1 1e05f4dbfb69157074e7ded18ac90ba609d39a0e
- SHA512 750e2db4e376a7cbacb32c7846835b6db0119fca675149213e5a57807fafffe6968a5eb759b876e9f4fd9c32bda2f8713576cb8760170ef883bc551e8a7636f2
- SSDEEP 1536:JLsF2Kerc64sTiX2IV0DXJrdShIPoANJLlAXuSXv+qSFEAeOFNk:JLy2Kerc64CiGIm7JrshIPFJRAhP2EAQ
- TLSH T1E193CF167B986052D88A0470CA7F4F3584397C791426E213B3D27A1F2DB2A52EF73ADD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1