General
- Target 2026-10-13_e9fad7217d85d55bc6ad195953dac642_elex_wannacry
- Size 53KB
- Sample261014-cy85maeb74
- SHA256 ee08848bf8586ba9b4c504800d3151756bc64f7f493678e7c78f12e76788e76e
- MD5 e9fad7217d85d55bc6ad195953dac642
- SHA1 49cf67be969a31f251895b516b65ec63ffaad731
- SHA512 36f5a7ec9f06bc06d3db34466eb61e8ad0e7e203f4f687e0c3c797e51d3539da4e6498487c598ec9bda150133fabb01ba5725fa1c95da4a2e843bbb76402cb16
- SSDEEP 1536:3LsF2Kerc64sTiX2IV0D5tcz9Kf8pOOq2O:3Ly2Kerc64CiGIm1tcBMUOOFO
- TLSH T180335C176A559056C0BB52B0FC884F30823AADB405B7B213B349B65D1CB2E52DFB1DBE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-13_e9fad7217d85d55bc6ad195953dac642_elex_wannacry.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-13_e9fad7217d85d55bc6ad195953dac642_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-13_e9fad7217d85d55bc6ad195953dac642_elex_wannacry
- Size 53KB
- SHA256 ee08848bf8586ba9b4c504800d3151756bc64f7f493678e7c78f12e76788e76e
- MD5 e9fad7217d85d55bc6ad195953dac642
- SHA1 49cf67be969a31f251895b516b65ec63ffaad731
- SHA512 36f5a7ec9f06bc06d3db34466eb61e8ad0e7e203f4f687e0c3c797e51d3539da4e6498487c598ec9bda150133fabb01ba5725fa1c95da4a2e843bbb76402cb16
- SSDEEP 1536:3LsF2Kerc64sTiX2IV0D5tcz9Kf8pOOq2O:3Ly2Kerc64CiGIm1tcBMUOOFO
- TLSH T180335C176A559056C0BB52B0FC884F30823AADB405B7B213B349B65D1CB2E52DFB1DBE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1