General
- Target 2026-08-30_06a4bdb088213eff82ef00318b17885d_elex_wannacry
- Size 64KB
- Sample260901-jb653sbf67
- SHA256 933566b7f05d9aa59a5425ce427e16997d41f9481900bf53486ec8aeec9b0441
- MD5 06a4bdb088213eff82ef00318b17885d
- SHA1 c12660edc2751172873ffd12649d1e9409db4b39
- SHA512 1f8db10eeaf6c8ffef247d9c1e8326f83cda4d26fd4ac1c1457df5a3eb133a8e6514a9585095ce721150614ae1509ba8e0e5094f664cd8804a741bbcc704938a
- SSDEEP 1536:t2LsF2Kerc64sTiX2IV0DOlOy6vlvqxy2dnNJfXlNWbITD/:t2Ly2Kerc64CiGImClOyqlvGdnNJfG8n
- TLSH T18E5338173BE554C2E1E606706DB68F78847BFC704A23D51AB780720E1C75E62DE31BAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-30_06a4bdb088213eff82ef00318b17885d_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-30_06a4bdb088213eff82ef00318b17885d_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_06a4bdb088213eff82ef00318b17885d_elex_wannacry
- Size 64KB
- SHA256 933566b7f05d9aa59a5425ce427e16997d41f9481900bf53486ec8aeec9b0441
- MD5 06a4bdb088213eff82ef00318b17885d
- SHA1 c12660edc2751172873ffd12649d1e9409db4b39
- SHA512 1f8db10eeaf6c8ffef247d9c1e8326f83cda4d26fd4ac1c1457df5a3eb133a8e6514a9585095ce721150614ae1509ba8e0e5094f664cd8804a741bbcc704938a
- SSDEEP 1536:t2LsF2Kerc64sTiX2IV0DOlOy6vlvqxy2dnNJfXlNWbITD/:t2Ly2Kerc64CiGImClOyqlvGdnNJfG8n
- TLSH T18E5338173BE554C2E1E606706DB68F78847BFC704A23D51AB780720E1C75E62DE31BAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1