General
- Target 2026-10-17_a4f251c1bcf787e2510260cf457409c0_elex_wannacry
- Size 49KB
- Sample261018-2bwcpach43
- SHA256 ddda1c284315d3b304776f22ab87add55d796946988ddfb27a0f20cd9c771658
- MD5 a4f251c1bcf787e2510260cf457409c0
- SHA1 70bf2d046610343573351bb5ba2c9e506591f529
- SHA512 8a5876f14f63881e84bae630a0bd78f78c8f25429a286ada911ad18b017cfb4fdbf1a6593d8e5bf469991ac8dfe484c21a4530a7a7d65b40a3b19caa6d7a507c
- SSDEEP 1536:VLsF2Kerc64sTiX2IV0Dhuj4p4kojVR6h2Z:VLy2Kerc64CiGImVu8p4kojWh2Z
- TLSH T103334D0A2BD650C2D56205B0E99A0F75833FDC3A2127A75EE740765A1C72D6BCF30E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-17_a4f251c1bcf787e2510260cf457409c0_elex_wannacry.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-17_a4f251c1bcf787e2510260cf457409c0_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-17_a4f251c1bcf787e2510260cf457409c0_elex_wannacry
- Size 49KB
- SHA256 ddda1c284315d3b304776f22ab87add55d796946988ddfb27a0f20cd9c771658
- MD5 a4f251c1bcf787e2510260cf457409c0
- SHA1 70bf2d046610343573351bb5ba2c9e506591f529
- SHA512 8a5876f14f63881e84bae630a0bd78f78c8f25429a286ada911ad18b017cfb4fdbf1a6593d8e5bf469991ac8dfe484c21a4530a7a7d65b40a3b19caa6d7a507c
- SSDEEP 1536:VLsF2Kerc64sTiX2IV0Dhuj4p4kojVR6h2Z:VLy2Kerc64CiGImVu8p4kojWh2Z
- TLSH T103334D0A2BD650C2D56205B0E99A0F75833FDC3A2127A75EE740765A1C72D6BCF30E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1