General
- Target 2026-08-26_ef1ab332603d8bdfe50d9723bb824cc3_elex_wannacry
- Size 137KB
- Sample260827-d59keaxvcw
- SHA256 344468c2934622f876bc97bcdea1d0a2283772c9eb6bdebf6f474d467d4b2063
- MD5 ef1ab332603d8bdfe50d9723bb824cc3
- SHA1 0ebae64eb17e0e52751b618811dbfa4ad6a61260
- SHA512 145608fceaeb734d486a08f96ca649b1563b0e3a1d51613d2194f943b1dcb5ef996041e3368308232975f510286b5c924c1a61a8b220c60535f91332be204258
- SSDEEP 3072:+Ly2Kerc64CiGImRRL0tU+3ZZYRGILCSihxnQDhGgI:+Ly2Kwc64YIcYjIDLCSiDaQb
- TLSH T12FD30A2B905330ACDA1782BCD7EA9671E4747CA41532BD7D5B28FA302F31C616F7A858
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-26_ef1ab332603d8bdfe50d9723bb824cc3_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-26_ef1ab332603d8bdfe50d9723bb824cc3_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-26_ef1ab332603d8bdfe50d9723bb824cc3_elex_wannacry
- Size 137KB
- SHA256 344468c2934622f876bc97bcdea1d0a2283772c9eb6bdebf6f474d467d4b2063
- MD5 ef1ab332603d8bdfe50d9723bb824cc3
- SHA1 0ebae64eb17e0e52751b618811dbfa4ad6a61260
- SHA512 145608fceaeb734d486a08f96ca649b1563b0e3a1d51613d2194f943b1dcb5ef996041e3368308232975f510286b5c924c1a61a8b220c60535f91332be204258
- SSDEEP 3072:+Ly2Kerc64CiGImRRL0tU+3ZZYRGILCSihxnQDhGgI:+Ly2Kwc64YIcYjIDLCSiDaQb
- TLSH T12FD30A2B905330ACDA1782BCD7EA9671E4747CA41532BD7D5B28FA302F31C616F7A858
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1