General
- Target 2026-08-31_8f3abc1586056ff7a7b90ea8d3e12740_elex_wannacry
- Size 48KB
- Sample260831-vsjxnahf93
- SHA256 044bc3eaf74b7a2bcf6780421cc401c6de23b468416d02ceb48b198622acd5a7
- MD5 8f3abc1586056ff7a7b90ea8d3e12740
- SHA1 5ba08e0ff6b424c4a999cfcba45b3b6871ea3496
- SHA512 8c2ad70e8e6879e28fafa15a601d683f0d87d61756221a40a70503412141c36aa92a676dc48cbd432d9419b6bcb3a3f7d7cf3cb94c4f7b3efbb7792c390a13f7
- SSDEEP 1536:bLsF2Kerc64sTiX2IV0DWvir2jaFBZ0/v8K:bLy2Kerc64CiGImav42j0C
- TLSH T14F234A2EB5A26068C55390B0E9EA3E31D4357C75013B752AA700BB252E76E23CF77D8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-31_8f3abc1586056ff7a7b90ea8d3e12740_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-31_8f3abc1586056ff7a7b90ea8d3e12740_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-31_8f3abc1586056ff7a7b90ea8d3e12740_elex_wannacry
- Size 48KB
- SHA256 044bc3eaf74b7a2bcf6780421cc401c6de23b468416d02ceb48b198622acd5a7
- MD5 8f3abc1586056ff7a7b90ea8d3e12740
- SHA1 5ba08e0ff6b424c4a999cfcba45b3b6871ea3496
- SHA512 8c2ad70e8e6879e28fafa15a601d683f0d87d61756221a40a70503412141c36aa92a676dc48cbd432d9419b6bcb3a3f7d7cf3cb94c4f7b3efbb7792c390a13f7
- SSDEEP 1536:bLsF2Kerc64sTiX2IV0DWvir2jaFBZ0/v8K:bLy2Kerc64CiGImav42j0C
- TLSH T14F234A2EB5A26068C55390B0E9EA3E31D4357C75013B752AA700BB252E76E23CF77D8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1