General
- Target 2026-10-10_67a09db4175cea1b7489553c27f00c3b_elex_wannacry
- Size 69KB
- Sample261011-phpgha1tcy
- SHA256 b9a88a256d73909963daba18bab34508617ae8a033ec3e2b53741fe6c2981f07
- MD5 67a09db4175cea1b7489553c27f00c3b
- SHA1 f0eb5c0febbee7d034f94452f1e9dc47388bde0e
- SHA512 40d0a34e173fd6271000bc4b69dd36f740f7f09720c2ecfdc52a272b892440ba412cfcb0e2b77ef7be745dccedbccc0023589e45cb7d7ce1a01f38c077aae70d
- SSDEEP 1536:tLsF2Kerc64sTiX2IV0DpK8SE9nYOhoQ6YBwEM9x:tLy2Kerc64CiGIm1K851YOhqYBwEM9x
- TLSH T19E63F70737A4A1E1D0A35270E8660B649B37ECB19A73A2077B94771D1DB2A41CF31B9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-10_67a09db4175cea1b7489553c27f00c3b_elex_wannacry.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-10_67a09db4175cea1b7489553c27f00c3b_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-10_67a09db4175cea1b7489553c27f00c3b_elex_wannacry
- Size 69KB
- SHA256 b9a88a256d73909963daba18bab34508617ae8a033ec3e2b53741fe6c2981f07
- MD5 67a09db4175cea1b7489553c27f00c3b
- SHA1 f0eb5c0febbee7d034f94452f1e9dc47388bde0e
- SHA512 40d0a34e173fd6271000bc4b69dd36f740f7f09720c2ecfdc52a272b892440ba412cfcb0e2b77ef7be745dccedbccc0023589e45cb7d7ce1a01f38c077aae70d
- SSDEEP 1536:tLsF2Kerc64sTiX2IV0DpK8SE9nYOhoQ6YBwEM9x:tLy2Kerc64CiGIm1K851YOhqYBwEM9x
- TLSH T19E63F70737A4A1E1D0A35270E8660B649B37ECB19A73A2077B94771D1DB2A41CF31B9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1