General
- Target 2026-08-27_f0af5a12062bbbc9e66f8b0db047eba6_elex_wannacry
- Size 53KB
- Sample260828-clncdssshv
- SHA256 cae2117aab3ed260ddf44a8d4e22b973104709a8edf435a1b4270191cb90cd89
- MD5 f0af5a12062bbbc9e66f8b0db047eba6
- SHA1 5c20e53d0239711500475d9ecae489bc88f3216f
- SHA512 8efeda3e1fff967a0ed46affaaa62d1ad37498b6aef54546d86a68b7c83525c083453aa4a75cae1c25860eaf8d56a7706bd6f113cd7ee403d583c6a20c236914
- SSDEEP 1536:3LsF2Kerc64sTiX2IV0D5tcz9Kf8pOOq22:3Ly2Kerc64CiGIm1tcBMUOOF2
- TLSH T1B2335C176A459056C0BB52B0FC884F30823AADB405B7B213B349B65D1CB2E52DFB1DBE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-27_f0af5a12062bbbc9e66f8b0db047eba6_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-27_f0af5a12062bbbc9e66f8b0db047eba6_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_f0af5a12062bbbc9e66f8b0db047eba6_elex_wannacry
- Size 53KB
- SHA256 cae2117aab3ed260ddf44a8d4e22b973104709a8edf435a1b4270191cb90cd89
- MD5 f0af5a12062bbbc9e66f8b0db047eba6
- SHA1 5c20e53d0239711500475d9ecae489bc88f3216f
- SHA512 8efeda3e1fff967a0ed46affaaa62d1ad37498b6aef54546d86a68b7c83525c083453aa4a75cae1c25860eaf8d56a7706bd6f113cd7ee403d583c6a20c236914
- SSDEEP 1536:3LsF2Kerc64sTiX2IV0D5tcz9Kf8pOOq22:3Ly2Kerc64CiGIm1tcBMUOOF2
- TLSH T1B2335C176A459056C0BB52B0FC884F30823AADB405B7B213B349B65D1CB2E52DFB1DBE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1