General
- Target 2026-10-13_d98a5453bf61c41a3b6914c5315700b8_elex_wannacry
- Size 47KB
- Sample261014-e3bq2ayth1
- SHA256 47aa23b0a5e83d111c50cba939e5b6ff9fcdfa7438fdc1e07200944c41ae5b93
- MD5 d98a5453bf61c41a3b6914c5315700b8
- SHA1 9f8e9f8db11a3b078fd17a705eff549291549805
- SHA512 27de4ee36a3067b82b769084076bd74606dbe463c3a776d4903e05a166f001d9ba04403ec31618a7f4bd79eb4eb9792da616ff6f40ca69c85c44abc5d7f4343f
- SSDEEP 768:tyZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqZNPWQHmgyFIvA0vqxet2dMINJN:t2LsF2Kerc64sTiX2IV0DOlgy6vlvqxn
- TLSH T147235B173EA520C1D6D610B0EAA90F78843DEDB50127A152F780B65D2CB6E62DF71ECE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-13_d98a5453bf61c41a3b6914c5315700b8_elex_wannacry.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-13_d98a5453bf61c41a3b6914c5315700b8_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-13_d98a5453bf61c41a3b6914c5315700b8_elex_wannacry
- Size 47KB
- SHA256 47aa23b0a5e83d111c50cba939e5b6ff9fcdfa7438fdc1e07200944c41ae5b93
- MD5 d98a5453bf61c41a3b6914c5315700b8
- SHA1 9f8e9f8db11a3b078fd17a705eff549291549805
- SHA512 27de4ee36a3067b82b769084076bd74606dbe463c3a776d4903e05a166f001d9ba04403ec31618a7f4bd79eb4eb9792da616ff6f40ca69c85c44abc5d7f4343f
- SSDEEP 768:tyZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqZNPWQHmgyFIvA0vqxet2dMINJN:t2LsF2Kerc64sTiX2IV0DOlgy6vlvqxn
- TLSH T147235B173EA520C1D6D610B0EAA90F78843DEDB50127A152F780B65D2CB6E62DF71ECE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1