General
- Target 2026-08-16_41b3157f3b4a5efa9f90d5c688f31829_elex_wannacry
- Size 32KB
- Sample260816-nae3esch55
- SHA256 b4b8499ca185932ac1964330ac6b926589a063ddaef199388725a133f736fecb
- MD5 41b3157f3b4a5efa9f90d5c688f31829
- SHA1 2fb2f98454420bbc40f5075679db4c023b547666
- SHA512 f242d7d6836682229db87117db75e1fa76f1170d7bb23f944bccb971bd6e36fd29ac720fea6aeb8e1456a70e017cea2b6ac6749e4f1cfd786bff2bfb374ed6eb
- SSDEEP 768:J9ZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqNNPWQHf7M:ZLsF2Kerc64sTiX2IV0DKy7M
- TLSH T157E23B2B6AA57052C59320F0F9592F34C43D9DB9016BB062F7417B6928B2D63CF71ACE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-16_41b3157f3b4a5efa9f90d5c688f31829_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_41b3157f3b4a5efa9f90d5c688f31829_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_41b3157f3b4a5efa9f90d5c688f31829_elex_wannacry
- Size 32KB
- SHA256 b4b8499ca185932ac1964330ac6b926589a063ddaef199388725a133f736fecb
- MD5 41b3157f3b4a5efa9f90d5c688f31829
- SHA1 2fb2f98454420bbc40f5075679db4c023b547666
- SHA512 f242d7d6836682229db87117db75e1fa76f1170d7bb23f944bccb971bd6e36fd29ac720fea6aeb8e1456a70e017cea2b6ac6749e4f1cfd786bff2bfb374ed6eb
- SSDEEP 768:J9ZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqNNPWQHf7M:ZLsF2Kerc64sTiX2IV0DKy7M
- TLSH T157E23B2B6AA57052C59320F0F9592F34C43D9DB9016BB062F7417B6928B2D63CF71ACE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1