General
- Target 2026-08-18_4d8f603bcd5328665443779348948755_elex_wannacry
- Size 94KB
- Sample260818-wlwtbaxeka
- SHA256 e050dbf85e8c6230029010caa4f639bc9750da308d295a20d9e3f8fb7663b100
- MD5 4d8f603bcd5328665443779348948755
- SHA1 f1e14c453b0f564dac081ec59f4d8c6a7c8a43a9
- SHA512 088d8f0e37ed60af5f4b0ecd7f28ee08aad77a8749a00464d3efc764c4e9e4c2c9695081d0221130bbe47485f1416db04106bb5cc1cad6676332b014562ea974
- SSDEEP 1536:RLsF2Kerc64sTiX2IV0DxY8rqBLSaVl17oMvTbMvY4+oi9u6G6/N8:RLy2Kerc64CiGImFYgUBWTb4/N8
- TLSH T110937C2157A85153F0B246B0AD761B3098B97CB56AB3B21EBB03774D1871D21FF34B8A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-18_4d8f603bcd5328665443779348948755_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_4d8f603bcd5328665443779348948755_elex_wannacry.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_4d8f603bcd5328665443779348948755_elex_wannacry
- Size 94KB
- SHA256 e050dbf85e8c6230029010caa4f639bc9750da308d295a20d9e3f8fb7663b100
- MD5 4d8f603bcd5328665443779348948755
- SHA1 f1e14c453b0f564dac081ec59f4d8c6a7c8a43a9
- SHA512 088d8f0e37ed60af5f4b0ecd7f28ee08aad77a8749a00464d3efc764c4e9e4c2c9695081d0221130bbe47485f1416db04106bb5cc1cad6676332b014562ea974
- SSDEEP 1536:RLsF2Kerc64sTiX2IV0DxY8rqBLSaVl17oMvTbMvY4+oi9u6G6/N8:RLy2Kerc64CiGImFYgUBWTb4/N8
- TLSH T110937C2157A85153F0B246B0AD761B3098B97CB56AB3B21EBB03774D1871D21FF34B8A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1