General
- Target 2026-09-20_e85ae3dc0099313c08134d77892a994c_elex_wannacry
- Size 32KB
- Sample260920-25fjbsvtay
- SHA256 3de65b86ec248fb4550a51a1afa6127bfd24cf35b36fd0b5ab30f186b85c14ca
- MD5 e85ae3dc0099313c08134d77892a994c
- SHA1 e26fdc4fc0f44688ea2e3b4e73e6de8210ac9473
- SHA512 83a567c8c12df14cde5a2cde59fffd41f70887c865b12dbe5073f9faf7780158ee5095829acee56aa72eb86270735944a252ab6347ace7efd7c858a13ed28881
- SSDEEP 768:uNZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqwNPWQHD4kqXls:cLsF2Kerc64sTiX2IV0DzY4kMG
- TLSH T1CAE23B2B6AA17052C59320B0F9592F35C43D9DB9016BB062F7417B6928B2D63CF71ECE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-20_e85ae3dc0099313c08134d77892a994c_elex_wannacry.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-20_e85ae3dc0099313c08134d77892a994c_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-20_e85ae3dc0099313c08134d77892a994c_elex_wannacry
- Size 32KB
- SHA256 3de65b86ec248fb4550a51a1afa6127bfd24cf35b36fd0b5ab30f186b85c14ca
- MD5 e85ae3dc0099313c08134d77892a994c
- SHA1 e26fdc4fc0f44688ea2e3b4e73e6de8210ac9473
- SHA512 83a567c8c12df14cde5a2cde59fffd41f70887c865b12dbe5073f9faf7780158ee5095829acee56aa72eb86270735944a252ab6347ace7efd7c858a13ed28881
- SSDEEP 768:uNZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqwNPWQHD4kqXls:cLsF2Kerc64sTiX2IV0DzY4kMG
- TLSH T1CAE23B2B6AA17052C59320B0F9592F35C43D9DB9016BB062F7417B6928B2D63CF71ECE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1