General
- Target 2026-09-04_39d279ebc73aaf3700440b5b96a31f15_elex_wannacry
- Size 42KB
- Sample260905-q7xpvawcnf
- SHA256 5069db75306596175c0bcce6a9c74d9eca6c7926d39af2dd37bf7501ff46654c
- MD5 39d279ebc73aaf3700440b5b96a31f15
- SHA1 698398b077900012d97ba429c6f194a004ab4b50
- SHA512 720ccd2f23a6ef3f7fb93c36bdb1594eb7c036af336e68e7ff4022d49bcaae5a86155f3f35e3b4471d1ea761045c8b81859cdb7a6c9d439d2b7ba27f3fe6ee91
- SSDEEP 768:zNZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqPNPWQHXFMcnrfrqx4RgutbGHix8f41t:z/LsF2Kerc64sTiX2IV0DgsfrfWJF2+C
- TLSH T1DD13171776A460D2CDB76074E91A4E30437E9CF664A7B317A72076202DB3D5ACFA02CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-04_39d279ebc73aaf3700440b5b96a31f15_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_39d279ebc73aaf3700440b5b96a31f15_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_39d279ebc73aaf3700440b5b96a31f15_elex_wannacry
- Size 42KB
- SHA256 5069db75306596175c0bcce6a9c74d9eca6c7926d39af2dd37bf7501ff46654c
- MD5 39d279ebc73aaf3700440b5b96a31f15
- SHA1 698398b077900012d97ba429c6f194a004ab4b50
- SHA512 720ccd2f23a6ef3f7fb93c36bdb1594eb7c036af336e68e7ff4022d49bcaae5a86155f3f35e3b4471d1ea761045c8b81859cdb7a6c9d439d2b7ba27f3fe6ee91
- SSDEEP 768:zNZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqPNPWQHXFMcnrfrqx4RgutbGHix8f41t:z/LsF2Kerc64sTiX2IV0DgsfrfWJF2+C
- TLSH T1DD13171776A460D2CDB76074E91A4E30437E9CF664A7B317A72076202DB3D5ACFA02CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1