General
- Target 2026-08-19_10c3ecde7c150158e283bae29495283e_elex_wannacry
- Size 30KB
- Sample260819-n79cjatcqa
- SHA256 5349d4b5e2118a700359e22b2a56be228f4effae15a2128f62ce8bcf339b112c
- MD5 10c3ecde7c150158e283bae29495283e
- SHA1 3e49ab98f5d4549c1a21b8da7b8662e6420483ae
- SHA512 7ee0c6be2a3ece9d00f095415472c26157cc15fe82c466cac70ab902dd862234c5680b97d848efb8ed7fe5cfa6e577873dd066e664586e62847d1d23822cdd7c
- SSDEEP 768:qZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqkkzNPWQHrn:OLsF2Kerc64sTiX2IV0DkFMn
- TLSH T130E27D2E3EA28053C5D700F0E9A91F78C97E953B2569A05BCB400D4D3CF1D66DAB1E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-19_10c3ecde7c150158e283bae29495283e_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_10c3ecde7c150158e283bae29495283e_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_10c3ecde7c150158e283bae29495283e_elex_wannacry
- Size 30KB
- SHA256 5349d4b5e2118a700359e22b2a56be228f4effae15a2128f62ce8bcf339b112c
- MD5 10c3ecde7c150158e283bae29495283e
- SHA1 3e49ab98f5d4549c1a21b8da7b8662e6420483ae
- SHA512 7ee0c6be2a3ece9d00f095415472c26157cc15fe82c466cac70ab902dd862234c5680b97d848efb8ed7fe5cfa6e577873dd066e664586e62847d1d23822cdd7c
- SSDEEP 768:qZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqkkzNPWQHrn:OLsF2Kerc64sTiX2IV0DkFMn
- TLSH T130E27D2E3EA28053C5D700F0E9A91F78C97E953B2569A05BCB400D4D3CF1D66DAB1E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1