General
- Target 2026-08-15_549913081384263fdfa492b655799e14_elex_wannacry
- Size 32KB
- Sample260815-bxd3esxsa1
- SHA256 2ad6dbc91869330e9f42c4eee17e0504d5b8a5a1f6151abf90dad5a99fb6e9bb
- MD5 549913081384263fdfa492b655799e14
- SHA1 3f071da3719de0b8594f2565ff64540da22caf34
- SHA512 2878f078312bc6ca6d02e385833fd72b17d43f6635f34698a65359764e049ccd9e2b10c42eafb6d4adcacbcfde532eb8ec935f33a3e8e664599c9c6109e99132
- SSDEEP 768:RZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqbNPWQHJnj:bLsF2Kerc64sTiX2IV0DEanj
- TLSH T148E22A2B2AA57052C59320B0F9591F34C43D9DB9116BB0A2F7417B6928B2D63CF71ECE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-15_549913081384263fdfa492b655799e14_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_549913081384263fdfa492b655799e14_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_549913081384263fdfa492b655799e14_elex_wannacry
- Size 32KB
- SHA256 2ad6dbc91869330e9f42c4eee17e0504d5b8a5a1f6151abf90dad5a99fb6e9bb
- MD5 549913081384263fdfa492b655799e14
- SHA1 3f071da3719de0b8594f2565ff64540da22caf34
- SHA512 2878f078312bc6ca6d02e385833fd72b17d43f6635f34698a65359764e049ccd9e2b10c42eafb6d4adcacbcfde532eb8ec935f33a3e8e664599c9c6109e99132
- SSDEEP 768:RZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqbNPWQHJnj:bLsF2Kerc64sTiX2IV0DEanj
- TLSH T148E22A2B2AA57052C59320B0F9591F34C43D9DB9116BB0A2F7417B6928B2D63CF71ECE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1