General
- Target 2026-08-31_f57a6ecaac8a88cf47e512a7c518847a_elex_wannacry
- Size 52KB
- Sample260831-pyvnfssckb
- SHA256 773296e5cbdf636001263c9117d0f80d274c2e8aba48a5c2f2c49da379378be9
- MD5 f57a6ecaac8a88cf47e512a7c518847a
- SHA1 496a0173e2b67bb806741c66ffdd4911080a5c84
- SHA512 458973b707de2dede7cef3e7f6c166e28624991d1e16df52147872cc3496500ed27ac72dab5d72b61e1ac6e64c76544808c77783d9d5e87c1eed702ed18a0da6
- SSDEEP 1536:sLsF2Kerc64sTiX2IV0DhuX/N+ASX1rRLowsX:sLy2Kerc64CiGImVuX/N81rRLoT
- TLSH T11F336B06FAEC5FD0F55309B0EAA50E74707D5CF54267E42AE70036582876E22CF61B9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-31_f57a6ecaac8a88cf47e512a7c518847a_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-31_f57a6ecaac8a88cf47e512a7c518847a_elex_wannacry.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-31_f57a6ecaac8a88cf47e512a7c518847a_elex_wannacry
- Size 52KB
- SHA256 773296e5cbdf636001263c9117d0f80d274c2e8aba48a5c2f2c49da379378be9
- MD5 f57a6ecaac8a88cf47e512a7c518847a
- SHA1 496a0173e2b67bb806741c66ffdd4911080a5c84
- SHA512 458973b707de2dede7cef3e7f6c166e28624991d1e16df52147872cc3496500ed27ac72dab5d72b61e1ac6e64c76544808c77783d9d5e87c1eed702ed18a0da6
- SSDEEP 1536:sLsF2Kerc64sTiX2IV0DhuX/N+ASX1rRLowsX:sLy2Kerc64CiGImVuX/N81rRLoT
- TLSH T11F336B06FAEC5FD0F55309B0EAA50E74707D5CF54267E42AE70036582876E22CF61B9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1