General
- Target 2026-08-16_ce9e5dc136d712d046c3a8012a6995d4_elex_wannacry
- Size 39KB
- Sample260816-va6npsscpd
- SHA256 4e8898c2a293ce6dbc6826f67181930f18e8c08608be8b26ae272a4588b5c3f2
- MD5 ce9e5dc136d712d046c3a8012a6995d4
- SHA1 459dcda8f9f2edc517acc2ff72ba3aa9f69608f7
- SHA512 7e708efdd91fddf70e4f9beb1bc7f063048892d5b8697afdbcec3d61c3acdbd0758d00177e0d3d595bbd78618f354b5449488f3a96ec007ccbd2586ff6403c67
- SSDEEP 768:uZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqGNPWQHV6+UGNSyxSBD:aLsF2Kerc64sTiX2IV0DVyIGFs
- TLSH T1D9035B1B2964B062C69611B0F8696F34C03DADB4052BF052F7447B992CB6DA3DF71ACE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-16_ce9e5dc136d712d046c3a8012a6995d4_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_ce9e5dc136d712d046c3a8012a6995d4_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_ce9e5dc136d712d046c3a8012a6995d4_elex_wannacry
- Size 39KB
- SHA256 4e8898c2a293ce6dbc6826f67181930f18e8c08608be8b26ae272a4588b5c3f2
- MD5 ce9e5dc136d712d046c3a8012a6995d4
- SHA1 459dcda8f9f2edc517acc2ff72ba3aa9f69608f7
- SHA512 7e708efdd91fddf70e4f9beb1bc7f063048892d5b8697afdbcec3d61c3acdbd0758d00177e0d3d595bbd78618f354b5449488f3a96ec007ccbd2586ff6403c67
- SSDEEP 768:uZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqGNPWQHV6+UGNSyxSBD:aLsF2Kerc64sTiX2IV0DVyIGFs
- TLSH T1D9035B1B2964B062C69611B0F8696F34C03DADB4052BF052F7447B992CB6DA3DF71ACE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1