General
- Target 2026-09-01_b14e9f2c3fe22e4ca8471fbc8ca3536d_elex_wannacry
- Size 47KB
- Sample260901-p6yebach37
- SHA256 65275241c67c2535a5ac1bfa3718d49a031f4997b53edcebc2c223cc1ccee2db
- MD5 b14e9f2c3fe22e4ca8471fbc8ca3536d
- SHA1 10f4da1e2e5263e535effc0e3d4a33e57913ca56
- SHA512 f2623e4ad0b49f7ce08ed7413b2a6a00d7d08902be3aa09590500c8fa1410ce027ce3d19dec9ce6d2390d77f41f665306c84ee40dcc11e31a6fdf3f770c57e3a
- SSDEEP 768:tyZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqZNPWQHmgyFIvA0vqxet2dMINJf:t2LsF2Kerc64sTiX2IV0DOlgy6vlvqxB
- TLSH T15C235B173EA520C1D6D610B0EAA90F78843DEDB50127A152F780B65D2CB6E62DF71ECE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-01_b14e9f2c3fe22e4ca8471fbc8ca3536d_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-01_b14e9f2c3fe22e4ca8471fbc8ca3536d_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-01_b14e9f2c3fe22e4ca8471fbc8ca3536d_elex_wannacry
- Size 47KB
- SHA256 65275241c67c2535a5ac1bfa3718d49a031f4997b53edcebc2c223cc1ccee2db
- MD5 b14e9f2c3fe22e4ca8471fbc8ca3536d
- SHA1 10f4da1e2e5263e535effc0e3d4a33e57913ca56
- SHA512 f2623e4ad0b49f7ce08ed7413b2a6a00d7d08902be3aa09590500c8fa1410ce027ce3d19dec9ce6d2390d77f41f665306c84ee40dcc11e31a6fdf3f770c57e3a
- SSDEEP 768:tyZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqZNPWQHmgyFIvA0vqxet2dMINJf:t2LsF2Kerc64sTiX2IV0DOlgy6vlvqxB
- TLSH T15C235B173EA520C1D6D610B0EAA90F78843DEDB50127A152F780B65D2CB6E62DF71ECE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1