General
- Target 2026-08-25_97d786db7f72a82017c0f4977609b757_elex_wannacry
- Size 32KB
- Sample260826-tz8c6aec72
- SHA256 493ab12e796c88b7e846af80e23bf551aaf09c15d5b3ecb7735311ca0237f179
- MD5 97d786db7f72a82017c0f4977609b757
- SHA1 6f3eb811f15d6edbf98059a1907883b627fe5e13
- SHA512 2fea44928f3c4d15aa392308acfb99f809a73aca47b18ead25a2f1da5c4f7fa592a5eb0b5efa891c4e226f980c0473c9e399e3ce1d82b5f1485eb2a4d2175209
- SSDEEP 768:RZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqbNPWQHJnd:bLsF2Kerc64sTiX2IV0DEand
- TLSH T162E22B2B2AA57052C59320B0F9591F34C43D9DB9116BB0A2F7417B6928B2D63CF71ECE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-25_97d786db7f72a82017c0f4977609b757_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_97d786db7f72a82017c0f4977609b757_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_97d786db7f72a82017c0f4977609b757_elex_wannacry
- Size 32KB
- SHA256 493ab12e796c88b7e846af80e23bf551aaf09c15d5b3ecb7735311ca0237f179
- MD5 97d786db7f72a82017c0f4977609b757
- SHA1 6f3eb811f15d6edbf98059a1907883b627fe5e13
- SHA512 2fea44928f3c4d15aa392308acfb99f809a73aca47b18ead25a2f1da5c4f7fa592a5eb0b5efa891c4e226f980c0473c9e399e3ce1d82b5f1485eb2a4d2175209
- SSDEEP 768:RZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqbNPWQHJnd:bLsF2Kerc64sTiX2IV0DEand
- TLSH T162E22B2B2AA57052C59320B0F9591F34C43D9DB9116BB0A2F7417B6928B2D63CF71ECE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1