General
- Target 2026-08-30_d5c1570e34e55912582ab12ae05b9979_elex_wannacry
- Size 64KB
- Sample260831-d5hrpathkh
- SHA256 5c1c6ba6fae3182a3b76d9ba0c47d46c28bc9778a606b7525f0002905a8b3fd6
- MD5 d5c1570e34e55912582ab12ae05b9979
- SHA1 8b96ba6fd4a41117b16c219704018b7e4a92dae8
- SHA512 7448575e8663e043a93285cd52a4d3b386405dfd43b196987a573b6c40818f7dd7cc00e34036f72aeb2cfd89cc3b827a3685e5b72312fa5fc807d2966c69ebdb
- SSDEEP 1536:t2LsF2Kerc64sTiX2IV0DOlOy6vlvqxy2dnNJfXlNWbITD9:t2Ly2Kerc64CiGImClOyqlvGdnNJfG8V
- TLSH T1925338173BE554C2E1E606706DB68F78847BFC704A23D51AB780720E1C75E62DE31BAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-30_d5c1570e34e55912582ab12ae05b9979_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-30_d5c1570e34e55912582ab12ae05b9979_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_d5c1570e34e55912582ab12ae05b9979_elex_wannacry
- Size 64KB
- SHA256 5c1c6ba6fae3182a3b76d9ba0c47d46c28bc9778a606b7525f0002905a8b3fd6
- MD5 d5c1570e34e55912582ab12ae05b9979
- SHA1 8b96ba6fd4a41117b16c219704018b7e4a92dae8
- SHA512 7448575e8663e043a93285cd52a4d3b386405dfd43b196987a573b6c40818f7dd7cc00e34036f72aeb2cfd89cc3b827a3685e5b72312fa5fc807d2966c69ebdb
- SSDEEP 1536:t2LsF2Kerc64sTiX2IV0DOlOy6vlvqxy2dnNJfXlNWbITD9:t2Ly2Kerc64CiGImClOyqlvGdnNJfG8V
- TLSH T1925338173BE554C2E1E606706DB68F78847BFC704A23D51AB780720E1C75E62DE31BAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1