General
- Target 2026-10-17_c6d5ac42a1f788de4759acaa56617afe_elex_wannacry
- Size 117KB
- Sample261018-ybcc2acd45
- SHA256 5e0445392f2125f09c87b911f26cc56808b0e5428189235e5f0084cdfb43bb70
- MD5 c6d5ac42a1f788de4759acaa56617afe
- SHA1 a11c8ee2cc71c007f52f97aa29cbcb20dde26eb1
- SHA512 ce3c3023879ca44ec43b82058dfdc23e94b99a59219a4d2cac46e4f1a26ae1b824a931896fa0061d33a32661986df41385df6e1492a504ccae64bc0c0b584fbd
- SSDEEP 1536:oLsF2Kerc64sTiX2IV0DA1cr2jaFBZ0/v82:oLy2Kerc64CiGImU1m2j0u
- TLSH T1A0C34B2EB5A26068C55290B4E9EA3F31D4317C75012B752AA700BF252E76E23CF77D8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-17_c6d5ac42a1f788de4759acaa56617afe_elex_wannacry.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-17_c6d5ac42a1f788de4759acaa56617afe_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-17_c6d5ac42a1f788de4759acaa56617afe_elex_wannacry
- Size 117KB
- SHA256 5e0445392f2125f09c87b911f26cc56808b0e5428189235e5f0084cdfb43bb70
- MD5 c6d5ac42a1f788de4759acaa56617afe
- SHA1 a11c8ee2cc71c007f52f97aa29cbcb20dde26eb1
- SHA512 ce3c3023879ca44ec43b82058dfdc23e94b99a59219a4d2cac46e4f1a26ae1b824a931896fa0061d33a32661986df41385df6e1492a504ccae64bc0c0b584fbd
- SSDEEP 1536:oLsF2Kerc64sTiX2IV0DA1cr2jaFBZ0/v82:oLy2Kerc64CiGImU1m2j0u
- TLSH T1A0C34B2EB5A26068C55290B4E9EA3F31D4317C75012B752AA700BF252E76E23CF77D8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1