General
- Target 2026-10-11_1f66bae389bba10c7a83fac0ca14f6fa_elex_wannacry
- Size 67KB
- Sample261013-dh2laavz7k
- SHA256 8d95c8a71d3252a5170762cd1837d4ba0023e67066482e5e34c7667559ccbd9d
- MD5 1f66bae389bba10c7a83fac0ca14f6fa
- SHA1 f713ff1d105801e08ff7ddd5c00248273289b7ee
- SHA512 5c6f98f5a3faec350b5fddc51a65ba82d2f4838a00d4a31f275e8596f0eb52f47e469a579e4688085ac8fe5d581141e14280b40448e1e6042fe8e6bb3d39f6f7
- SSDEEP 1536:aLsF2Kerc64sTiX2IV0DVyIGFoyyCwlAY0VdTQd:aLy2Kerc64CiGImRylFyp8T6
- TLSH T173633B16B950B032D99211B46A6D6B36817A9DF10707A0D3F7407ADD28F2BD2EF346CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-11_1f66bae389bba10c7a83fac0ca14f6fa_elex_wannacry.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-11_1f66bae389bba10c7a83fac0ca14f6fa_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-11_1f66bae389bba10c7a83fac0ca14f6fa_elex_wannacry
- Size 67KB
- SHA256 8d95c8a71d3252a5170762cd1837d4ba0023e67066482e5e34c7667559ccbd9d
- MD5 1f66bae389bba10c7a83fac0ca14f6fa
- SHA1 f713ff1d105801e08ff7ddd5c00248273289b7ee
- SHA512 5c6f98f5a3faec350b5fddc51a65ba82d2f4838a00d4a31f275e8596f0eb52f47e469a579e4688085ac8fe5d581141e14280b40448e1e6042fe8e6bb3d39f6f7
- SSDEEP 1536:aLsF2Kerc64sTiX2IV0DVyIGFoyyCwlAY0VdTQd:aLy2Kerc64CiGImRylFyp8T6
- TLSH T173633B16B950B032D99211B46A6D6B36817A9DF10707A0D3F7407ADD28F2BD2EF346CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1