General
- Target 2026-09-11_3633fe91184b260859e6861bf645266c_elex_wannacry
- Size 40KB
- Sample260912-nlkr2swble
- SHA256 5c2aad04d9ad2b133058d85cb2e9977f5b49a95b08d2726235da2403c3b9cecb
- MD5 3633fe91184b260859e6861bf645266c
- SHA1 7e03da4aa5a2db6794a441775ac689f414d64822
- SHA512 66d17af4a340e65bd1945fe3898eb9db6f192bf275a72f56a8e0c2c9978fb7be213c33815cbc8598c88149106442844937f1d139a5308ea88f810400fcc34510
- SSDEEP 768:hZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqNWkr7toN:rLsF2Kerc64sTiX2IV0DRGN
- TLSH T120032A2B2AA47051C59320B0F9591F34C83E9DB5016BB062F7417B6A28B6D63CF75ECE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-11_3633fe91184b260859e6861bf645266c_elex_wannacry.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-11_3633fe91184b260859e6861bf645266c_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-11_3633fe91184b260859e6861bf645266c_elex_wannacry
- Size 40KB
- SHA256 5c2aad04d9ad2b133058d85cb2e9977f5b49a95b08d2726235da2403c3b9cecb
- MD5 3633fe91184b260859e6861bf645266c
- SHA1 7e03da4aa5a2db6794a441775ac689f414d64822
- SHA512 66d17af4a340e65bd1945fe3898eb9db6f192bf275a72f56a8e0c2c9978fb7be213c33815cbc8598c88149106442844937f1d139a5308ea88f810400fcc34510
- SSDEEP 768:hZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqNWkr7toN:rLsF2Kerc64sTiX2IV0DRGN
- TLSH T120032A2B2AA47051C59320B0F9591F34C83E9DB5016BB062F7417B6A28B6D63CF75ECE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1