General
- Target 2026-08-22_b58b611465a961dce6063412e78d5ca8_elex_wannacry
- Size 48KB
- Sample260823-cfb26swxey
- SHA256 f891804a77c87b3e48f1c526e3428c8907e661a74b067717f65a1826fb4085f8
- MD5 b58b611465a961dce6063412e78d5ca8
- SHA1 37a822752f3caa9bcf6532ec4d31757751fd5910
- SHA512 22958807b9b95f4b93b658d4c925e77cfde3db71bf5df69393839a81c928443380a29bc2d1112ed024fceb4a1517293f01d7780c9830957114e6980ad474573f
- SSDEEP 1536:bLsF2Kerc64sTiX2IV0DWvir2jaFBZ0/v8H:bLy2Kerc64CiGImav42j0v
- TLSH T170234A2EB5A26068C55390B0E9EA3E31D4357C75013B752AA700BB252E76E23CF77D8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-22_b58b611465a961dce6063412e78d5ca8_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_b58b611465a961dce6063412e78d5ca8_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_b58b611465a961dce6063412e78d5ca8_elex_wannacry
- Size 48KB
- SHA256 f891804a77c87b3e48f1c526e3428c8907e661a74b067717f65a1826fb4085f8
- MD5 b58b611465a961dce6063412e78d5ca8
- SHA1 37a822752f3caa9bcf6532ec4d31757751fd5910
- SHA512 22958807b9b95f4b93b658d4c925e77cfde3db71bf5df69393839a81c928443380a29bc2d1112ed024fceb4a1517293f01d7780c9830957114e6980ad474573f
- SSDEEP 1536:bLsF2Kerc64sTiX2IV0DWvir2jaFBZ0/v8H:bLy2Kerc64CiGImav42j0v
- TLSH T170234A2EB5A26068C55390B0E9EA3E31D4357C75013B752AA700BB252E76E23CF77D8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1