General
- Target 2026-10-02_fdda14a105177af14de0331c0302ceec_elex_wannacry
- Size 32KB
- Sample261002-1ewl7atdnf
- SHA256 f499eb76f0a0b17545bbfee4cc8633caba10859f34b319fbef320ce2596de1d7
- MD5 fdda14a105177af14de0331c0302ceec
- SHA1 b7cf4b54b3066dc6d5bd1b534ebd08bba7e36b0d
- SHA512 e2f1cd2e7dd8a66a6b37bed6a70c4419e980e27eb0064e4abf0f0cbc18632e3994e1b730f5695494d44c7db6f2dfd4b66b207d34cb1b46217ee6c37e91f328d3
- SSDEEP 768:AUZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqKNPWQHpd:AYLsF2Kerc64sTiX2IV0Dhud
- TLSH T16FE2293B2AA17052C59220B0F9991F348D7D4CB7116BB066FB417A6928B2D63CF70DDE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-02_fdda14a105177af14de0331c0302ceec_elex_wannacry.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-02_fdda14a105177af14de0331c0302ceec_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-02_fdda14a105177af14de0331c0302ceec_elex_wannacry
- Size 32KB
- SHA256 f499eb76f0a0b17545bbfee4cc8633caba10859f34b319fbef320ce2596de1d7
- MD5 fdda14a105177af14de0331c0302ceec
- SHA1 b7cf4b54b3066dc6d5bd1b534ebd08bba7e36b0d
- SHA512 e2f1cd2e7dd8a66a6b37bed6a70c4419e980e27eb0064e4abf0f0cbc18632e3994e1b730f5695494d44c7db6f2dfd4b66b207d34cb1b46217ee6c37e91f328d3
- SSDEEP 768:AUZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqKNPWQHpd:AYLsF2Kerc64sTiX2IV0Dhud
- TLSH T16FE2293B2AA17052C59220B0F9991F348D7D4CB7116BB066FB417A6928B2D63CF70DDE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1