General
- Target 2026-08-30_61c3a70be4354bc35813f2d9636da984_elex_wannacry
- Size 53KB
- Sample260831-mnd7lszeqa
- SHA256 4fc2ec0d0e2bc6742cb5ea225bb9c2bb4cb88eab199a8598800794bf7b26e4ff
- MD5 61c3a70be4354bc35813f2d9636da984
- SHA1 4379971da97aebf52db4895dfc5f3b29f44d428d
- SHA512 7d25ad49a4ee36138b811dbc5bf0d3a74929fb4a07c9d9039f5bd6b8fa386d898ea2e7259d9ffb11aa44358570bce2374bc18d5217fe33eec3b6ef34e94a775f
- SSDEEP 1536:3LsF2Kerc64sTiX2IV0D5tcz9Kf8pOOq2+:3Ly2Kerc64CiGIm1tcBMUOOF+
- TLSH T1D9335C176A459056C0BB52B0FC884F30823AADB405B7B213B349B65D1CB2E52DFB1DBE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-30_61c3a70be4354bc35813f2d9636da984_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-30_61c3a70be4354bc35813f2d9636da984_elex_wannacry.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_61c3a70be4354bc35813f2d9636da984_elex_wannacry
- Size 53KB
- SHA256 4fc2ec0d0e2bc6742cb5ea225bb9c2bb4cb88eab199a8598800794bf7b26e4ff
- MD5 61c3a70be4354bc35813f2d9636da984
- SHA1 4379971da97aebf52db4895dfc5f3b29f44d428d
- SHA512 7d25ad49a4ee36138b811dbc5bf0d3a74929fb4a07c9d9039f5bd6b8fa386d898ea2e7259d9ffb11aa44358570bce2374bc18d5217fe33eec3b6ef34e94a775f
- SSDEEP 1536:3LsF2Kerc64sTiX2IV0D5tcz9Kf8pOOq2+:3Ly2Kerc64CiGIm1tcBMUOOF+
- TLSH T1D9335C176A459056C0BB52B0FC884F30823AADB405B7B213B349B65D1CB2E52DFB1DBE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1