General
- Target 2026-10-17_5cf604e3e3617d8864a23bd0ff7140f7_elex_wannacry
- Size 32KB
- Sample261019-esc64set7v
- SHA256 e0a8f792c8d07ad8ee0ab430efeeb2447dc879e57f59df593770f970cfd3f8cf
- MD5 5cf604e3e3617d8864a23bd0ff7140f7
- SHA1 94fa8dd24f9b644b67a3d92e94703c6406e9a1df
- SHA512 c3feb61357df945f5390994ccfb58e097caaaed898c3df0139ba9f808db32760b0355fead917d62303863ffd786bb543bea601592853d4e9b6b3ae9962f7677c
- SSDEEP 768:5ZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqKNPWQHp1:DLsF2Kerc64sTiX2IV0Dhu1
- TLSH T105E24A1B2AA17052C59320B0FA991F34C47D4CB6116BB066FB417B6928B2D63CFB1DDE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-17_5cf604e3e3617d8864a23bd0ff7140f7_elex_wannacry.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-17_5cf604e3e3617d8864a23bd0ff7140f7_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-17_5cf604e3e3617d8864a23bd0ff7140f7_elex_wannacry
- Size 32KB
- SHA256 e0a8f792c8d07ad8ee0ab430efeeb2447dc879e57f59df593770f970cfd3f8cf
- MD5 5cf604e3e3617d8864a23bd0ff7140f7
- SHA1 94fa8dd24f9b644b67a3d92e94703c6406e9a1df
- SHA512 c3feb61357df945f5390994ccfb58e097caaaed898c3df0139ba9f808db32760b0355fead917d62303863ffd786bb543bea601592853d4e9b6b3ae9962f7677c
- SSDEEP 768:5ZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqKNPWQHp1:DLsF2Kerc64sTiX2IV0Dhu1
- TLSH T105E24A1B2AA17052C59320B0FA991F34C47D4CB6116BB066FB417B6928B2D63CFB1DDE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1