General
- Target 2026-09-30_80a0b838e7aac90a203363d85df40c5b_elex_wannacry
- Size 67KB
- Sample260930-l5f7vsv1cx
- SHA256 67fd8f6449e7bdb135101cec7108681798060bad7ebd8e1d09435ae720681b6e
- MD5 80a0b838e7aac90a203363d85df40c5b
- SHA1 6b3ad70944d5f0b331e30677427e38b891c88b2c
- SHA512 e9de788b157f536236416395c83129fcf4ebc81973965fdbbb1fa0fc4ee5b80761394b998fc39d9513ab36cbe81d277747c86c8cf02471a4c99a0854f23a1a5b
- SSDEEP 1536:aLsF2Kerc64sTiX2IV0DVyIGFoyyCwlAY0VdTQW:aLy2Kerc64CiGImRylFyp8TV
- TLSH T14D633B16B950B032D99211B46A6D6B36817A9DF10707A0D3F7407ADD28F2BD2EF346CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-30_80a0b838e7aac90a203363d85df40c5b_elex_wannacry.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-30_80a0b838e7aac90a203363d85df40c5b_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_80a0b838e7aac90a203363d85df40c5b_elex_wannacry
- Size 67KB
- SHA256 67fd8f6449e7bdb135101cec7108681798060bad7ebd8e1d09435ae720681b6e
- MD5 80a0b838e7aac90a203363d85df40c5b
- SHA1 6b3ad70944d5f0b331e30677427e38b891c88b2c
- SHA512 e9de788b157f536236416395c83129fcf4ebc81973965fdbbb1fa0fc4ee5b80761394b998fc39d9513ab36cbe81d277747c86c8cf02471a4c99a0854f23a1a5b
- SSDEEP 1536:aLsF2Kerc64sTiX2IV0DVyIGFoyyCwlAY0VdTQW:aLy2Kerc64CiGImRylFyp8TV
- TLSH T14D633B16B950B032D99211B46A6D6B36817A9DF10707A0D3F7407ADD28F2BD2EF346CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1