General
- Target 2026-09-20_7b4384b80cb6ec3cc748c6927806007f_elex_wannacry
- Size 32KB
- Sample260920-hz6nsateqa
- SHA256 f0a4e56279ea22488cd358ded4d540a23b0f2207c4e45024959b8f7cf8eb023d
- MD5 7b4384b80cb6ec3cc748c6927806007f
- SHA1 4404eae03e3e66ce93953a5a90d7a3996ba65d17
- SHA512 0f3da2aff89fed010c93bc417fcb96565e598ed0af3d2ab731f8a149b9b3fed4f803889df99171134051f7ac67645979ebe6840bb098e84658fd999489d3b2ae
- SSDEEP 768:uNZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqwNPWQHD4kqXlq:cLsF2Kerc64sTiX2IV0DzY4kMg
- TLSH T196E23B2B6AA17052C59320B0F9592F35C43D9CB9016BB062F7417B6928B2D63CF71ECE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-20_7b4384b80cb6ec3cc748c6927806007f_elex_wannacry.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-20_7b4384b80cb6ec3cc748c6927806007f_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-20_7b4384b80cb6ec3cc748c6927806007f_elex_wannacry
- Size 32KB
- SHA256 f0a4e56279ea22488cd358ded4d540a23b0f2207c4e45024959b8f7cf8eb023d
- MD5 7b4384b80cb6ec3cc748c6927806007f
- SHA1 4404eae03e3e66ce93953a5a90d7a3996ba65d17
- SHA512 0f3da2aff89fed010c93bc417fcb96565e598ed0af3d2ab731f8a149b9b3fed4f803889df99171134051f7ac67645979ebe6840bb098e84658fd999489d3b2ae
- SSDEEP 768:uNZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqwNPWQHD4kqXlq:cLsF2Kerc64sTiX2IV0DzY4kMg
- TLSH T196E23B2B6AA17052C59320B0F9592F35C43D9CB9016BB062F7417B6928B2D63CF71ECE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1