General
- Target 2026-10-04_ec7e14529650099e0d85fdcab4702fef_elex_wannacry
- Size 137KB
- Sample261004-2tfd7ayflh
- SHA256 f33741478f93c042a69fad8bb061a69ec094480f204a538e32d5bab2c1bcd5b5
- MD5 ec7e14529650099e0d85fdcab4702fef
- SHA1 cace813b027a3e48e6b00579e2486d359492265b
- SHA512 e0e3268f11761232d2f41e50bfaa9ceddd1529f09ae8bdd2eb1f2fb7d1baa9f4ed11f24d41e2b995a373f7e919496c121fd6d0ba84f945cf087259b7b00763d7
- SSDEEP 3072:+Ly2Kerc64CiGImRRL0tU+3ZZYRGILCSihxnQDhGg5:+Ly2Kwc64YIcYjIDLCSiDaQm
- TLSH T18DD30A2B905330ACDA1782BCD7EA9671E4747CA41532BD7D5B28FA302F31C616F7A858
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-04_ec7e14529650099e0d85fdcab4702fef_elex_wannacry.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-04_ec7e14529650099e0d85fdcab4702fef_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-04_ec7e14529650099e0d85fdcab4702fef_elex_wannacry
- Size 137KB
- SHA256 f33741478f93c042a69fad8bb061a69ec094480f204a538e32d5bab2c1bcd5b5
- MD5 ec7e14529650099e0d85fdcab4702fef
- SHA1 cace813b027a3e48e6b00579e2486d359492265b
- SHA512 e0e3268f11761232d2f41e50bfaa9ceddd1529f09ae8bdd2eb1f2fb7d1baa9f4ed11f24d41e2b995a373f7e919496c121fd6d0ba84f945cf087259b7b00763d7
- SSDEEP 3072:+Ly2Kerc64CiGImRRL0tU+3ZZYRGILCSihxnQDhGg5:+Ly2Kwc64YIcYjIDLCSiDaQm
- TLSH T18DD30A2B905330ACDA1782BCD7EA9671E4747CA41532BD7D5B28FA302F31C616F7A858
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1