General
- Target 2026-09-20_641819b7f86ad706908ae1d935af708e_elex_wannacry
- Size 94KB
- Sample260920-shdlsace83
- SHA256 37690590461635471f3d7fa8ad2bc453fd00808b2347b23e74b9559f330f1bc3
- MD5 641819b7f86ad706908ae1d935af708e
- SHA1 9c6968f8589ab6e20f3770b59415cf2b48889451
- SHA512 1217356450f7257439277337ed40db122cfce100c8fa730ea2eae67f692b2b5fc074f2af02bd5befe97244237ce6359ef07df661359bbfffa4861a1d42a97221
- SSDEEP 1536:RLsF2Kerc64sTiX2IV0DxY8rqBLSaVl17oMvTbMvY4+oi9u6G6/Na:RLy2Kerc64CiGImFYgUBWTb4/Na
- TLSH T127937C2157A85153F0B246B0AD761B3098B97CB56AB3B21EBB03774D1871D21FF34B8A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-20_641819b7f86ad706908ae1d935af708e_elex_wannacry.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-20_641819b7f86ad706908ae1d935af708e_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-20_641819b7f86ad706908ae1d935af708e_elex_wannacry
- Size 94KB
- SHA256 37690590461635471f3d7fa8ad2bc453fd00808b2347b23e74b9559f330f1bc3
- MD5 641819b7f86ad706908ae1d935af708e
- SHA1 9c6968f8589ab6e20f3770b59415cf2b48889451
- SHA512 1217356450f7257439277337ed40db122cfce100c8fa730ea2eae67f692b2b5fc074f2af02bd5befe97244237ce6359ef07df661359bbfffa4861a1d42a97221
- SSDEEP 1536:RLsF2Kerc64sTiX2IV0DxY8rqBLSaVl17oMvTbMvY4+oi9u6G6/Na:RLy2Kerc64CiGImFYgUBWTb4/Na
- TLSH T127937C2157A85153F0B246B0AD761B3098B97CB56AB3B21EBB03774D1871D21FF34B8A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1