General
- Target 2026-10-16_79ea29e6b261a08677469b63d131f8b0_elex_wannacry
- Size 70KB
- Sample261017-rcpanafc69
- SHA256 5cf2e3ab6e80beaef1e414c1edabbe22cb797ca29b689eb4d6bdd92727c4d0e4
- MD5 79ea29e6b261a08677469b63d131f8b0
- SHA1 8907b05c1e07ae57860fb5f02470a4785dbe5fab
- SHA512 d552218c9b94ebeb2aaa67bc8c30df5bba212ef034280d5a4260263d135896730883428134943d8cb00fb10038d6c2af1366969a88e0cce910a28839f14848d6
- SSDEEP 1536:vLsF2Kerc64sTiX2IV0DhuX/N+ASX1rRLows3SE9nYOk:vLy2Kerc64CiGImVuX/N81rRLoD51YOk
- TLSH T17A633906FB89DBD0F0534570E9560AA4747EACF18E63A51BB744730D2C72B16CF32A9A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-16_79ea29e6b261a08677469b63d131f8b0_elex_wannacry.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-16_79ea29e6b261a08677469b63d131f8b0_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-16_79ea29e6b261a08677469b63d131f8b0_elex_wannacry
- Size 70KB
- SHA256 5cf2e3ab6e80beaef1e414c1edabbe22cb797ca29b689eb4d6bdd92727c4d0e4
- MD5 79ea29e6b261a08677469b63d131f8b0
- SHA1 8907b05c1e07ae57860fb5f02470a4785dbe5fab
- SHA512 d552218c9b94ebeb2aaa67bc8c30df5bba212ef034280d5a4260263d135896730883428134943d8cb00fb10038d6c2af1366969a88e0cce910a28839f14848d6
- SSDEEP 1536:vLsF2Kerc64sTiX2IV0DhuX/N+ASX1rRLows3SE9nYOk:vLy2Kerc64CiGImVuX/N81rRLoD51YOk
- TLSH T17A633906FB89DBD0F0534570E9560AA4747EACF18E63A51BB744730D2C72B16CF32A9A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1