General
- Target 2026-09-04_3e96b571564c373c2c361383454d6382_elex_wannacry
- Size 57KB
- Sample260905-qmmddavhld
- SHA256 f1c9751a3177effd7ec43757d654eccf07278783cea507c1cff670f716bc0a2d
- MD5 3e96b571564c373c2c361383454d6382
- SHA1 5cd11a3ff51a6f7cd8723aae5d2326a68987a862
- SHA512 fa25958b07629cb380176f24cd79bf446fa9c809beea30519170e0d7adab31ee323c1e2a60ae39a8bd50a33a44ffd19bbb4d01b5e64c1a53b72af98b3153c02e
- SSDEEP 1536:zcLsF2Kerc64sTiX2IV0DgsfrfWJF2+BD9Dmqaq:wLy2Kerc64CiGImEsoDfaq
- TLSH T1CF433913366414D1D8BB2138A4025E354BB8BDB21467F622B750BA1E1D779DACFAC3CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-04_3e96b571564c373c2c361383454d6382_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_3e96b571564c373c2c361383454d6382_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_3e96b571564c373c2c361383454d6382_elex_wannacry
- Size 57KB
- SHA256 f1c9751a3177effd7ec43757d654eccf07278783cea507c1cff670f716bc0a2d
- MD5 3e96b571564c373c2c361383454d6382
- SHA1 5cd11a3ff51a6f7cd8723aae5d2326a68987a862
- SHA512 fa25958b07629cb380176f24cd79bf446fa9c809beea30519170e0d7adab31ee323c1e2a60ae39a8bd50a33a44ffd19bbb4d01b5e64c1a53b72af98b3153c02e
- SSDEEP 1536:zcLsF2Kerc64sTiX2IV0DgsfrfWJF2+BD9Dmqaq:wLy2Kerc64CiGImEsoDfaq
- TLSH T1CF433913366414D1D8BB2138A4025E354BB8BDB21467F622B750BA1E1D779DACFAC3CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1