General
- Target 2026-08-20_9f8837d6025e35fe0ffbc09846d9d36c_elex_wannacry
- Size 87KB
- Sample260820-1dcspayygt
- SHA256 ac993f9d51f371c10cc3c31826bb659a234d0e1198cf053639bf1be25d400f68
- MD5 9f8837d6025e35fe0ffbc09846d9d36c
- SHA1 eb9ead910f8a324622f3bfe6ceaca0f7c51c9700
- SHA512 95a935ed2cf2953abafeba9faf89eca20b7016342fab7b2bdc5b19ca0f21d27b68bfce006a2e8bd2cbccade148e49b2eeaeee77f4decfa418c378e1206eab40d
- SSDEEP 1536:2LsF2Kerc64sTiX2IV0DpK8SE9nYOzmEQkwpM:2Ly2Kerc64CiGIm1K851YO6EQkwpM
- TLSH T15693A1763A259190C48BD138E8155AA0B932DCF52FF71303E6417AAC59B1E13CFAE8C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-20_9f8837d6025e35fe0ffbc09846d9d36c_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_9f8837d6025e35fe0ffbc09846d9d36c_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_9f8837d6025e35fe0ffbc09846d9d36c_elex_wannacry
- Size 87KB
- SHA256 ac993f9d51f371c10cc3c31826bb659a234d0e1198cf053639bf1be25d400f68
- MD5 9f8837d6025e35fe0ffbc09846d9d36c
- SHA1 eb9ead910f8a324622f3bfe6ceaca0f7c51c9700
- SHA512 95a935ed2cf2953abafeba9faf89eca20b7016342fab7b2bdc5b19ca0f21d27b68bfce006a2e8bd2cbccade148e49b2eeaeee77f4decfa418c378e1206eab40d
- SSDEEP 1536:2LsF2Kerc64sTiX2IV0DpK8SE9nYOzmEQkwpM:2Ly2Kerc64CiGIm1K851YO6EQkwpM
- TLSH T15693A1763A259190C48BD138E8155AA0B932DCF52FF71303E6417AAC59B1E13CFAE8C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1