General
- Target 2026-08-17_6a2774b0a793eb49514b967f9d125c97_elex_wannacry
- Size 57KB
- Sample260818-amf9cstsay
- SHA256 c061b4aafdaf25892acba3931a498aef83462d66566ece56c3e68951c877040c
- MD5 6a2774b0a793eb49514b967f9d125c97
- SHA1 f9dd15b1ec8094302c98c76ec5a44123fe96ca48
- SHA512 fd593aedbe1944a4557db9e106b09856429836a77eb98834990abadfaa1db34c70d5aa8728ac1cf77342d37e84a53984b78b5fbaefed66faec016e8ed1b2ba2f
- SSDEEP 1536:qLsF2Kerc64sTiX2IV0DYlNpyyCwlAY0VdTQ1:qLy2Kerc64CiGImklNUyp8TK
- TLSH T1A7433C16B950B072D99220B06A6D6B36417A9DF10317A1D3E7407ADD68F2FD2EF306CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-17_6a2774b0a793eb49514b967f9d125c97_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_6a2774b0a793eb49514b967f9d125c97_elex_wannacry.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_6a2774b0a793eb49514b967f9d125c97_elex_wannacry
- Size 57KB
- SHA256 c061b4aafdaf25892acba3931a498aef83462d66566ece56c3e68951c877040c
- MD5 6a2774b0a793eb49514b967f9d125c97
- SHA1 f9dd15b1ec8094302c98c76ec5a44123fe96ca48
- SHA512 fd593aedbe1944a4557db9e106b09856429836a77eb98834990abadfaa1db34c70d5aa8728ac1cf77342d37e84a53984b78b5fbaefed66faec016e8ed1b2ba2f
- SSDEEP 1536:qLsF2Kerc64sTiX2IV0DYlNpyyCwlAY0VdTQ1:qLy2Kerc64CiGImklNUyp8TK
- TLSH T1A7433C16B950B072D99220B06A6D6B36417A9DF10317A1D3E7407ADD68F2FD2EF306CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1