General
- Target 2026-09-01_6792085bb646a833c95254744396ecab_elex_wannacry
- Size 88KB
- Sample260903-mpcp6sgf64
- SHA256 4c930b62d5f1bc802c99767e2c5f15f8609d6e5289cb1ed69a4d9f02e7f7fac8
- MD5 6792085bb646a833c95254744396ecab
- SHA1 241449de850e88ca782144305f1c03803e365468
- SHA512 acc5f9ba0faaec423e18be0a0401136cd5c49c9b5e55095ebfcb8a421098002ce4816bb8e78d30f27446662edd6f40d14342dff6b569b882e6000e3ba263d836
- SSDEEP 1536:5LsF2Kerc64sTiX2IV0DVk2Lbuzc/9yH8Ky9193jiT5l364KlVk937tgrb:5Ly2Kerc64CiGImRRLyzc/9yH8Ka193T
- TLSH T16A934A8F73251205D9770979A2052F19AC3DADE78357A04CA7C4B1693833D3ACB3F6A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-01_6792085bb646a833c95254744396ecab_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-01_6792085bb646a833c95254744396ecab_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-01_6792085bb646a833c95254744396ecab_elex_wannacry
- Size 88KB
- SHA256 4c930b62d5f1bc802c99767e2c5f15f8609d6e5289cb1ed69a4d9f02e7f7fac8
- MD5 6792085bb646a833c95254744396ecab
- SHA1 241449de850e88ca782144305f1c03803e365468
- SHA512 acc5f9ba0faaec423e18be0a0401136cd5c49c9b5e55095ebfcb8a421098002ce4816bb8e78d30f27446662edd6f40d14342dff6b569b882e6000e3ba263d836
- SSDEEP 1536:5LsF2Kerc64sTiX2IV0DVk2Lbuzc/9yH8Ky9193jiT5l364KlVk937tgrb:5Ly2Kerc64CiGImRRLyzc/9yH8Ka193T
- TLSH T16A934A8F73251205D9770979A2052F19AC3DADE78357A04CA7C4B1693833D3ACB3F6A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1