General
- Target 2026-09-30_84ceb005e94b74e215d67df9d75606b4_elex_wannacry
- Size 222KB
- Sample260930-ly97csxhpe
- SHA256 c9a50045508a9301c7090904bea7c3b404077fc5ee8064a670250c1c011aba3c
- MD5 84ceb005e94b74e215d67df9d75606b4
- SHA1 a13932fc4e6df87945fbe53b5644208a2f6325fd
- SHA512 76493452eb0058c47cb03ee66765a6302fb297ae5488d2c579766fe8a87d8ca67733a00699d351d1344efc51b50794a5ab940371e434d8a4bf3e3522b54dfe90
- SSDEEP 6144:WLy2Kwc64YIdcoA28wzQocJje7RsxBQOAUokS:WkwcERoA28wzmJje7RsHcUTS
- TLSH T192245A23B751B4EAC81242348EA68671E771BC701B72BB2FB306B73D1C30945BF65A56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-30_84ceb005e94b74e215d67df9d75606b4_elex_wannacry.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-30_84ceb005e94b74e215d67df9d75606b4_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_84ceb005e94b74e215d67df9d75606b4_elex_wannacry
- Size 222KB
- SHA256 c9a50045508a9301c7090904bea7c3b404077fc5ee8064a670250c1c011aba3c
- MD5 84ceb005e94b74e215d67df9d75606b4
- SHA1 a13932fc4e6df87945fbe53b5644208a2f6325fd
- SHA512 76493452eb0058c47cb03ee66765a6302fb297ae5488d2c579766fe8a87d8ca67733a00699d351d1344efc51b50794a5ab940371e434d8a4bf3e3522b54dfe90
- SSDEEP 6144:WLy2Kwc64YIdcoA28wzQocJje7RsxBQOAUokS:WkwcERoA28wzmJje7RsHcUTS
- TLSH T192245A23B751B4EAC81242348EA68671E771BC701B72BB2FB306B73D1C30945BF65A56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1