General
- Target 2026-09-08_8c0fca01e15ad946edf5af53ec8a7e39_elex_wannacry
- Size 61KB
- Sample260910-etvgsazsfs
- SHA256 6a5f8f8a3f95581cec01571c5eb3cf7c3db86e2d6eebad2114568147020f8df6
- MD5 8c0fca01e15ad946edf5af53ec8a7e39
- SHA1 0b307d3a016a9ec519c364632c17ecfea440d8db
- SHA512 cb491a16373332b644693807eaadd60ebbe50cf23855b8c2460925c74595810794ebbd79ea2b0332e5b9dc5ca094998e7b0f71c50e11f1a32a6d7aed0e880005
- SSDEEP 1536:yLsF2Kerc64sTiX2IV0DZZbyyCwlAY0VdTQW:yLy2Kerc64CiGImVZuyp8TB
- TLSH T197532C26B950B072D95220B06A6D6B36417A9DF10317A1D3E7407ADC68F2FD2EF306CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-08_8c0fca01e15ad946edf5af53ec8a7e39_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-08_8c0fca01e15ad946edf5af53ec8a7e39_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_8c0fca01e15ad946edf5af53ec8a7e39_elex_wannacry
- Size 61KB
- SHA256 6a5f8f8a3f95581cec01571c5eb3cf7c3db86e2d6eebad2114568147020f8df6
- MD5 8c0fca01e15ad946edf5af53ec8a7e39
- SHA1 0b307d3a016a9ec519c364632c17ecfea440d8db
- SHA512 cb491a16373332b644693807eaadd60ebbe50cf23855b8c2460925c74595810794ebbd79ea2b0332e5b9dc5ca094998e7b0f71c50e11f1a32a6d7aed0e880005
- SSDEEP 1536:yLsF2Kerc64sTiX2IV0DZZbyyCwlAY0VdTQW:yLy2Kerc64CiGImVZuyp8TB
- TLSH T197532C26B950B072D95220B06A6D6B36417A9DF10317A1D3E7407ADC68F2FD2EF306CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1