General
- Target 2026-09-09_631d825c2dff093852596afbfa50088c_elex_wannacry
- Size 88KB
- Sample260909-xkdf1sdf83
- SHA256 f4f980f924633c79323e87bff84a94db7b581aef6913dc6a6d57aab72b0872e5
- MD5 631d825c2dff093852596afbfa50088c
- SHA1 b8138dbd7b81c947072dec08aa066451292ab6f3
- SHA512 cb4d0dc6a22721f8b9e66b802faef716a69dae35844f0492f672399f3406e9f6f7aa7ef53c9ccb00d549347b2ad73b110ae31ebf03696ccd10c1e56c765e7320
- SSDEEP 1536:zLsF2Kerc64sTiX2IV0D7c/wGeP58ORX73iu/uwzCR3lsl5cN35fWJcedCgVjrs4:zLy2Kerc64CiGImHc/28wzCBlycJWeeD
- TLSH T166933C2EA59320FCCA5BC170C6BB6732D4357C251035B63E6344FB352E70E62AB29E59
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-09_631d825c2dff093852596afbfa50088c_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-09_631d825c2dff093852596afbfa50088c_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-09_631d825c2dff093852596afbfa50088c_elex_wannacry
- Size 88KB
- SHA256 f4f980f924633c79323e87bff84a94db7b581aef6913dc6a6d57aab72b0872e5
- MD5 631d825c2dff093852596afbfa50088c
- SHA1 b8138dbd7b81c947072dec08aa066451292ab6f3
- SHA512 cb4d0dc6a22721f8b9e66b802faef716a69dae35844f0492f672399f3406e9f6f7aa7ef53c9ccb00d549347b2ad73b110ae31ebf03696ccd10c1e56c765e7320
- SSDEEP 1536:zLsF2Kerc64sTiX2IV0D7c/wGeP58ORX73iu/uwzCR3lsl5cN35fWJcedCgVjrs4:zLy2Kerc64CiGImHc/28wzCBlycJWeeD
- TLSH T166933C2EA59320FCCA5BC170C6BB6732D4357C251035B63E6344FB352E70E62AB29E59
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1