General
- Target 2026-08-18_a944cff9c50f982bceafce07d81949ff_elex_wannacry
- Size 95KB
- Sample260818-27a2matza1
- SHA256 4746825a8c9c1d4e8aa3631b9b3a01f664dfe336d2e8becb1e5867e0868bd41e
- MD5 a944cff9c50f982bceafce07d81949ff
- SHA1 1c5c3b8638aefb66b0381e51bebb2aa16bb2fc67
- SHA512 ccb0af07b5e6ec480e365b8060d6897364ec20b93539decb61e868a17351bd46a887c23072a13190d53d1ce102a22ec7c7b44a598d9a9fa984aac6660d257762
- SSDEEP 1536:JLsF2Kerc64sTiX2IV0DXJrdShIPoANJLlAXuSXv+qSFEAeOFNn:JLy2Kerc64CiGIm7JrshIPFJRAhP2EAj
- TLSH T15593CF167B986052D88A0470CA7F4F3584397C791426E213B3D27A1F2DB2A52EF73ADD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-18_a944cff9c50f982bceafce07d81949ff_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_a944cff9c50f982bceafce07d81949ff_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_a944cff9c50f982bceafce07d81949ff_elex_wannacry
- Size 95KB
- SHA256 4746825a8c9c1d4e8aa3631b9b3a01f664dfe336d2e8becb1e5867e0868bd41e
- MD5 a944cff9c50f982bceafce07d81949ff
- SHA1 1c5c3b8638aefb66b0381e51bebb2aa16bb2fc67
- SHA512 ccb0af07b5e6ec480e365b8060d6897364ec20b93539decb61e868a17351bd46a887c23072a13190d53d1ce102a22ec7c7b44a598d9a9fa984aac6660d257762
- SSDEEP 1536:JLsF2Kerc64sTiX2IV0DXJrdShIPoANJLlAXuSXv+qSFEAeOFNn:JLy2Kerc64CiGIm7JrshIPFJRAhP2EAj
- TLSH T15593CF167B986052D88A0470CA7F4F3584397C791426E213B3D27A1F2DB2A52EF73ADD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1