General
- Target 2026-08-31_a29e806a2db51fc66c4980f07f42e60b_elex_wannacry
- Size 61KB
- Sample260831-tx2slacr4v
- SHA256 0f09e6f2a165c93d267dbd0f71809f30ce192c23f76ff3714f51ea520df10a93
- MD5 a29e806a2db51fc66c4980f07f42e60b
- SHA1 a68d40c2ca5fa2f5d88551b3cfc79d7546402069
- SHA512 36baa3b570ae192d3ee93873278efb2271a2f7b74a3809dfd0138926e6dd2008184275396be8fc5fdd41bbfc17f19fb8677381bcf77bf010ed6b67b72193f933
- SSDEEP 1536:yLsF2Kerc64sTiX2IV0DZZbyyCwlAY0VdTQd:yLy2Kerc64CiGImVZuyp8Te
- TLSH T134532C26B950B072D95220B06A6D6B36417A9DF10317A1D3E7407ADC68F2FD2EF306CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-31_a29e806a2db51fc66c4980f07f42e60b_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-31_a29e806a2db51fc66c4980f07f42e60b_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-31_a29e806a2db51fc66c4980f07f42e60b_elex_wannacry
- Size 61KB
- SHA256 0f09e6f2a165c93d267dbd0f71809f30ce192c23f76ff3714f51ea520df10a93
- MD5 a29e806a2db51fc66c4980f07f42e60b
- SHA1 a68d40c2ca5fa2f5d88551b3cfc79d7546402069
- SHA512 36baa3b570ae192d3ee93873278efb2271a2f7b74a3809dfd0138926e6dd2008184275396be8fc5fdd41bbfc17f19fb8677381bcf77bf010ed6b67b72193f933
- SSDEEP 1536:yLsF2Kerc64sTiX2IV0DZZbyyCwlAY0VdTQd:yLy2Kerc64CiGImVZuyp8Te
- TLSH T134532C26B950B072D95220B06A6D6B36417A9DF10317A1D3E7407ADC68F2FD2EF306CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1