General
- Target 2026-10-17_60d6fa648a6c33062055a685e96401b1_elex_wannacry
- Size 32KB
- Sample261019-eed69aes2y
- SHA256 67df9087a81df101ba3ca9cc5a187d6cf25caed397a98fbc15c58f4549ad4229
- MD5 60d6fa648a6c33062055a685e96401b1
- SHA1 ed09809af9f71a6c7b2aacf6e4f10d9b2c68e814
- SHA512 7441033bbbf068664f35797aab912249bda2346a5235a436e0621ca4b45e2e497c0afe624fe3e2b2757e223e551e9a20cb8d4e98d1c59578cb87b7fea17fbce2
- SSDEEP 768:/ZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqnOdNPWQH/L:xLsF2Kerc64sTiX2IV0DxYL
- TLSH T110E23B2B6AA17052C59320F0F9591F34C43D9DB9016BB462F7417A692CB2E63CF71ACE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-17_60d6fa648a6c33062055a685e96401b1_elex_wannacry.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-17_60d6fa648a6c33062055a685e96401b1_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-17_60d6fa648a6c33062055a685e96401b1_elex_wannacry
- Size 32KB
- SHA256 67df9087a81df101ba3ca9cc5a187d6cf25caed397a98fbc15c58f4549ad4229
- MD5 60d6fa648a6c33062055a685e96401b1
- SHA1 ed09809af9f71a6c7b2aacf6e4f10d9b2c68e814
- SHA512 7441033bbbf068664f35797aab912249bda2346a5235a436e0621ca4b45e2e497c0afe624fe3e2b2757e223e551e9a20cb8d4e98d1c59578cb87b7fea17fbce2
- SSDEEP 768:/ZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqnOdNPWQH/L:xLsF2Kerc64sTiX2IV0DxYL
- TLSH T110E23B2B6AA17052C59320F0F9591F34C43D9DB9016BB462F7417A692CB2E63CF71ACE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1