General
- Target 2026-08-28_cade533faf0c556c45953c06536d7ee5_elex_wannacry
- Size 124KB
- Sample260828-kmh33avycv
- SHA256 9c3cd3c77d90280a7e2bc0973549e139a2ce7d94fde6d3bedcf6b0119ceffdde
- MD5 cade533faf0c556c45953c06536d7ee5
- SHA1 97569367f2dd8e7f81f88bc394d700b3a61e3549
- SHA512 1418d7b11341bfd5cd575b3abdf221767de2ff764ca26555a385145eed2f3107a436413448b33cc2acd3536309ec40b003c6aa6fb0a8bcd9152b94300391311b
- SSDEEP 768:6ZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqiNPWQHFE1CaW+99DmggwaY:eLsF2Kerc64sTiX2IV0DpKED9DmqaY
- TLSH T177C34B2B2A642051C1862174A8556B398D74BDB4013BE031B7817E9E18BBDE7CF7CBDE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-28_cade533faf0c556c45953c06536d7ee5_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-28_cade533faf0c556c45953c06536d7ee5_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-28_cade533faf0c556c45953c06536d7ee5_elex_wannacry
- Size 124KB
- SHA256 9c3cd3c77d90280a7e2bc0973549e139a2ce7d94fde6d3bedcf6b0119ceffdde
- MD5 cade533faf0c556c45953c06536d7ee5
- SHA1 97569367f2dd8e7f81f88bc394d700b3a61e3549
- SHA512 1418d7b11341bfd5cd575b3abdf221767de2ff764ca26555a385145eed2f3107a436413448b33cc2acd3536309ec40b003c6aa6fb0a8bcd9152b94300391311b
- SSDEEP 768:6ZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqiNPWQHFE1CaW+99DmggwaY:eLsF2Kerc64sTiX2IV0DpKED9DmqaY
- TLSH T177C34B2B2A642051C1862174A8556B398D74BDB4013BE031B7817E9E18BBDE7CF7CBDE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1