General
- Target 2026-08-16_6a2399cd47d599fa5f734140316d161d_elex_wannacry
- Size 32KB
- Sample260816-mvxbrswte1
- SHA256 f4e7abb4353e094c77ae496be9d96951790a3cbf314563e9c4be4f679112dbb7
- MD5 6a2399cd47d599fa5f734140316d161d
- SHA1 9b936bed06b3aa5f9f791fc58c3d7e91c1135e8c
- SHA512 211f02298ac818fa50bf4b7ff113170d5abe2f2d3a9ac825dbb6511def8286f7e91ca8091b1d02a445f7dea0a9a275422b6b8aee9a213115de70ee6c02cd83d0
- SSDEEP 768:RZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqbNPWQHJno:bLsF2Kerc64sTiX2IV0DEano
- TLSH T11AE22B2B2AA57052C59320B0F9591F34C43D9DB9116BB0A2F7417B6928B2D63CF71ECE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-16_6a2399cd47d599fa5f734140316d161d_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_6a2399cd47d599fa5f734140316d161d_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_6a2399cd47d599fa5f734140316d161d_elex_wannacry
- Size 32KB
- SHA256 f4e7abb4353e094c77ae496be9d96951790a3cbf314563e9c4be4f679112dbb7
- MD5 6a2399cd47d599fa5f734140316d161d
- SHA1 9b936bed06b3aa5f9f791fc58c3d7e91c1135e8c
- SHA512 211f02298ac818fa50bf4b7ff113170d5abe2f2d3a9ac825dbb6511def8286f7e91ca8091b1d02a445f7dea0a9a275422b6b8aee9a213115de70ee6c02cd83d0
- SSDEEP 768:RZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqbNPWQHJno:bLsF2Kerc64sTiX2IV0DEano
- TLSH T11AE22B2B2AA57052C59320B0F9591F34C43D9DB9116BB0A2F7417B6928B2D63CF71ECE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1