General
- Target 2026-08-30_016a3ddba4314c24509a68ce79d42ea1_elex_wannacry
- Size 32KB
- Sample260830-2gmmqs1fkg
- SHA256 9d7a25431aa29ad66d4be3be78ccc32bc7322b8dcc7a456df46c6547e89bf920
- MD5 016a3ddba4314c24509a68ce79d42ea1
- SHA1 616a8da5c4f6b607cd52bded994e151266591eec
- SHA512 0d68b90169eac3955493ab655702ccc8d1ea215cd6b37126667a350f8e1625cbd25f7b3c0b381d466adc901c921fe1c0b48fc24a08f75c7cb948654653a97aa9
- SSDEEP 768:DZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqXNPWQHbfV:tLsF2Kerc64sTiX2IV0DYQd
- TLSH T16DE23B2B6AA17052C59320F0F9591F34C43D9DB5116BB062F7417B6928B2D63CF71ACE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-30_016a3ddba4314c24509a68ce79d42ea1_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-30_016a3ddba4314c24509a68ce79d42ea1_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_016a3ddba4314c24509a68ce79d42ea1_elex_wannacry
- Size 32KB
- SHA256 9d7a25431aa29ad66d4be3be78ccc32bc7322b8dcc7a456df46c6547e89bf920
- MD5 016a3ddba4314c24509a68ce79d42ea1
- SHA1 616a8da5c4f6b607cd52bded994e151266591eec
- SHA512 0d68b90169eac3955493ab655702ccc8d1ea215cd6b37126667a350f8e1625cbd25f7b3c0b381d466adc901c921fe1c0b48fc24a08f75c7cb948654653a97aa9
- SSDEEP 768:DZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqXNPWQHbfV:tLsF2Kerc64sTiX2IV0DYQd
- TLSH T16DE23B2B6AA17052C59320F0F9591F34C43D9DB5116BB062F7417B6928B2D63CF71ACE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1