General
- Target 2026-08-21_108d1b98a5a70e4fd3325630bf729d14_elex_wannacry
- Size 56KB
- Sample260822-xnn2xsbm4t
- SHA256 0b2012bc33ae0094c1d36ceb130fb6037a65133977e3e011e679556652f41253
- MD5 108d1b98a5a70e4fd3325630bf729d14
- SHA1 2658a5ec1a387aab1eaa4c816d7bb10e628da7ac
- SHA512 825d6287b4200d5d4cb09049f5b000f8a1c448c63c7e5a858b2ddfaaa1a315734f91e171d510ab4f9561efde5d2ec5a81d8f7a9ca5cdc2f0a3a75ee215855af8
- SSDEEP 1536:pLsF2Kerc64sTiX2IV0DhuD8OKFVG9WGWn:pLy2Kerc64CiGImVuD8OKFE9WBn
- TLSH T15C4319263AE61CD3C15364F0EAE49B308078FD7219279023E794BB9815BEC92DF7199D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-21_108d1b98a5a70e4fd3325630bf729d14_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_108d1b98a5a70e4fd3325630bf729d14_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_108d1b98a5a70e4fd3325630bf729d14_elex_wannacry
- Size 56KB
- SHA256 0b2012bc33ae0094c1d36ceb130fb6037a65133977e3e011e679556652f41253
- MD5 108d1b98a5a70e4fd3325630bf729d14
- SHA1 2658a5ec1a387aab1eaa4c816d7bb10e628da7ac
- SHA512 825d6287b4200d5d4cb09049f5b000f8a1c448c63c7e5a858b2ddfaaa1a315734f91e171d510ab4f9561efde5d2ec5a81d8f7a9ca5cdc2f0a3a75ee215855af8
- SSDEEP 1536:pLsF2Kerc64sTiX2IV0DhuD8OKFVG9WGWn:pLy2Kerc64CiGImVuD8OKFE9WBn
- TLSH T15C4319263AE61CD3C15364F0EAE49B308078FD7219279023E794BB9815BEC92DF7199D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1