General
- Target 2026-09-06_79a15afb2b5c8d286ea8297273209912_elex_wannacry
- Size 42KB
- Sample260907-arwvlsam51
- SHA256 e2064a095287f88ef71a02b94932f630ef85ad65cebf925c34bfeee6cf897cde
- MD5 79a15afb2b5c8d286ea8297273209912
- SHA1 f4202f11508a72b36de8a419332cb25d57a59757
- SHA512 45af58c19a1b79e21271e59347f9c1ce8322e1e925b3e328b1bcd6d3c2dd64e36e509af265e635a157abce36bbf6857557b9069d98150273e44133e741a61ac1
- SSDEEP 768:FZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqyNPWQHehiod1aVN9KfQHftESOOls:3LsF2Kerc64sTiX2IV0D5tcz9Kf8pOOK
- TLSH T196134A2A6994A052C1A312B0FC9D5F35853D9DB814E7B047B344BA5D2CB2E63DF70E8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-06_79a15afb2b5c8d286ea8297273209912_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-06_79a15afb2b5c8d286ea8297273209912_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-06_79a15afb2b5c8d286ea8297273209912_elex_wannacry
- Size 42KB
- SHA256 e2064a095287f88ef71a02b94932f630ef85ad65cebf925c34bfeee6cf897cde
- MD5 79a15afb2b5c8d286ea8297273209912
- SHA1 f4202f11508a72b36de8a419332cb25d57a59757
- SHA512 45af58c19a1b79e21271e59347f9c1ce8322e1e925b3e328b1bcd6d3c2dd64e36e509af265e635a157abce36bbf6857557b9069d98150273e44133e741a61ac1
- SSDEEP 768:FZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqyNPWQHehiod1aVN9KfQHftESOOls:3LsF2Kerc64sTiX2IV0D5tcz9Kf8pOOK
- TLSH T196134A2A6994A052C1A312B0FC9D5F35853D9DB814E7B047B344BA5D2CB2E63DF70E8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1