General
- Target 2026-09-04_aaaa89a297983a64938361902785ebde_elex_wannacry
- Size 87KB
- Sample260905-a5jr7scl7w
- SHA256 a30663e49974ec5e7045f04c352572b84d16c8a5c66c9ffefe94c0eb2db9416a
- MD5 aaaa89a297983a64938361902785ebde
- SHA1 9f77ff9d159f7eeb218a1a032099b9d5e73d913d
- SHA512 e45d15c8442567d1718aef28baffb1c4b7a28184027c02e72c5a9181737639cebe3ecbb640c3a4f4cf41f23ecbacb6b5d245d59ab5c2fe0635ecf51aebabf786
- SSDEEP 1536:2LsF2Kerc64sTiX2IV0DpK8SE9nYOzmEQkwpk:2Ly2Kerc64CiGIm1K851YO6EQkwpk
- TLSH T11193A1763A259190C48BD178E8155AA0B932DCF52FF71303E6417AAC59B1E13CFAE8C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-04_aaaa89a297983a64938361902785ebde_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_aaaa89a297983a64938361902785ebde_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_aaaa89a297983a64938361902785ebde_elex_wannacry
- Size 87KB
- SHA256 a30663e49974ec5e7045f04c352572b84d16c8a5c66c9ffefe94c0eb2db9416a
- MD5 aaaa89a297983a64938361902785ebde
- SHA1 9f77ff9d159f7eeb218a1a032099b9d5e73d913d
- SHA512 e45d15c8442567d1718aef28baffb1c4b7a28184027c02e72c5a9181737639cebe3ecbb640c3a4f4cf41f23ecbacb6b5d245d59ab5c2fe0635ecf51aebabf786
- SSDEEP 1536:2LsF2Kerc64sTiX2IV0DpK8SE9nYOzmEQkwpk:2Ly2Kerc64CiGIm1K851YO6EQkwpk
- TLSH T11193A1763A259190C48BD178E8155AA0B932DCF52FF71303E6417AAC59B1E13CFAE8C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1