General
- Target 2026-09-04_c40d2b83b4ea0d2ac2319bfce22cd725_elex_wannacry
- Size 32KB
- Sample260904-178r8a1gld
- SHA256 c8a4b3dec2abd1801f49cfc3023773dec9733973b8d9fc9737180a6c6b69dc30
- MD5 c40d2b83b4ea0d2ac2319bfce22cd725
- SHA1 972b70cc87efffbba05d5ce06d7ab20a93be8b6a
- SHA512 ceb807c373e7f8cd436cee81d2c40995ba9798d644437a059bdd1595eee61afb3f576371cc25aecaccf05106b17e280657f0fd188aee9d40c1d4bf5179daa76d
- SSDEEP 768:DZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqXNPWQHbfd:tLsF2Kerc64sTiX2IV0DYQl
- TLSH T185E23B2B6AA17052C59320F0F9591F34C43D9DB5116BB062F7417B6928B2D63CF71ACE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-04_c40d2b83b4ea0d2ac2319bfce22cd725_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_c40d2b83b4ea0d2ac2319bfce22cd725_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_c40d2b83b4ea0d2ac2319bfce22cd725_elex_wannacry
- Size 32KB
- SHA256 c8a4b3dec2abd1801f49cfc3023773dec9733973b8d9fc9737180a6c6b69dc30
- MD5 c40d2b83b4ea0d2ac2319bfce22cd725
- SHA1 972b70cc87efffbba05d5ce06d7ab20a93be8b6a
- SHA512 ceb807c373e7f8cd436cee81d2c40995ba9798d644437a059bdd1595eee61afb3f576371cc25aecaccf05106b17e280657f0fd188aee9d40c1d4bf5179daa76d
- SSDEEP 768:DZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqXNPWQHbfd:tLsF2Kerc64sTiX2IV0DYQl
- TLSH T185E23B2B6AA17052C59320F0F9591F34C43D9DB5116BB062F7417B6928B2D63CF71ACE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1