General
- Target 2026-10-21_951f036212a2c9f42b371e04bb9350fe_elex_wannacry
- Size 88KB
- Sample261022-vbprksv16n
- SHA256 9ef04e2ae96aa94e0456c17f815bc7af4092c75d6e0c550366c1361f70df3905
- MD5 951f036212a2c9f42b371e04bb9350fe
- SHA1 3799fc1b4c87b8f350c809ab217ea60086b889b1
- SHA512 5ce3c6879b08fad73f0db68eafec8d393505584af6b14e6dd0bcdf73c1ad93f0aa03d3d757f9ca9753e600c380fea50dca5726a5941037aa7e2e306c5be589fd
- SSDEEP 1536:sLsF2Kerc64sTiX2IV0DgsowGeP58ORX73iu/uwzCR3lsl5cN35fWJcedCgVjrsu:sLy2Kerc64CiGIm8so28wzCBlycJWee5
- TLSH T130933B2EA5A220FCCA57C170C6BB6B32D4357C251035B63E6344FF352E70E62A729E59
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-21_951f036212a2c9f42b371e04bb9350fe_elex_wannacry.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-21_951f036212a2c9f42b371e04bb9350fe_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-21_951f036212a2c9f42b371e04bb9350fe_elex_wannacry
- Size 88KB
- SHA256 9ef04e2ae96aa94e0456c17f815bc7af4092c75d6e0c550366c1361f70df3905
- MD5 951f036212a2c9f42b371e04bb9350fe
- SHA1 3799fc1b4c87b8f350c809ab217ea60086b889b1
- SHA512 5ce3c6879b08fad73f0db68eafec8d393505584af6b14e6dd0bcdf73c1ad93f0aa03d3d757f9ca9753e600c380fea50dca5726a5941037aa7e2e306c5be589fd
- SSDEEP 1536:sLsF2Kerc64sTiX2IV0DgsowGeP58ORX73iu/uwzCR3lsl5cN35fWJcedCgVjrsu:sLy2Kerc64CiGIm8so28wzCBlycJWee5
- TLSH T130933B2EA5A220FCCA57C170C6BB6B32D4357C251035B63E6344FF352E70E62A729E59
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1