General
- Target 2026-08-18_f04ac32415b679695e5f9fca3ac2cb62_elex_wannacry
- Size 49KB
- Sample260818-2ntpmatway
- SHA256 809a83812cefd9914bea8de64c997dcb8b409f981bbeae64416917840b720d85
- MD5 f04ac32415b679695e5f9fca3ac2cb62
- SHA1 b40a3a39e4e41650114a1ff8dc68eb8884c01f58
- SHA512 e6f438af3800d880c1b0170f6de70d597f625be6b3fad9f3948c946ecd3d94c2ed78be18501348ecee5d00b9294e1accd48b0d4ac0680c7e2dd8b4d218fa0b89
- SSDEEP 1536:4LsF2Kerc64sTiX2IV0Dhuj4p4kojVR6h2R:4Ly2Kerc64CiGImVu8p4kojWh2R
- TLSH T1F6334C0A2BD650C2D56205B0E99A0F75833FDC3A2127A75EE740765A1C72D6BCF30E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-18_f04ac32415b679695e5f9fca3ac2cb62_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_f04ac32415b679695e5f9fca3ac2cb62_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_f04ac32415b679695e5f9fca3ac2cb62_elex_wannacry
- Size 49KB
- SHA256 809a83812cefd9914bea8de64c997dcb8b409f981bbeae64416917840b720d85
- MD5 f04ac32415b679695e5f9fca3ac2cb62
- SHA1 b40a3a39e4e41650114a1ff8dc68eb8884c01f58
- SHA512 e6f438af3800d880c1b0170f6de70d597f625be6b3fad9f3948c946ecd3d94c2ed78be18501348ecee5d00b9294e1accd48b0d4ac0680c7e2dd8b4d218fa0b89
- SSDEEP 1536:4LsF2Kerc64sTiX2IV0Dhuj4p4kojVR6h2R:4Ly2Kerc64CiGImVu8p4kojWh2R
- TLSH T1F6334C0A2BD650C2D56205B0E99A0F75833FDC3A2127A75EE740765A1C72D6BCF30E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1