General
- Target 2026-10-21_7ee32d156961c0a380581afaf67459d1_elex_wannacry
- Size 157KB
- Sample261022-ymfvlafs2w
- SHA256 6c072d2db6b20c6c56f0ece50a5d81dc3fe9b2e9f9437264d3b82c6d5ab2c967
- MD5 7ee32d156961c0a380581afaf67459d1
- SHA1 6a714e807d6ff38c39296c6170e8333c4a15a134
- SHA512 27262571672e60a69c70d3b1b833048ccd711b8cfe36b22558122ffc234f98e1417aa97fa826ab2b2a3970b12ed852dc886d18f9b576d3c491620b54d17a87ba
- SSDEEP 3072:vLy2Kerc64CiGImVuX/N81rRLoPtU+3ZZYRGILCSihxnQDhGgb:vLy2Kwc64YIweIFOjIDLCSiDaQY
- TLSH T10FF31A2BE19723ACE6178278D7EA95B1E0787CA41533BD3D5B14FA302F30C645B7A918
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-21_7ee32d156961c0a380581afaf67459d1_elex_wannacry.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-21_7ee32d156961c0a380581afaf67459d1_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-21_7ee32d156961c0a380581afaf67459d1_elex_wannacry
- Size 157KB
- SHA256 6c072d2db6b20c6c56f0ece50a5d81dc3fe9b2e9f9437264d3b82c6d5ab2c967
- MD5 7ee32d156961c0a380581afaf67459d1
- SHA1 6a714e807d6ff38c39296c6170e8333c4a15a134
- SHA512 27262571672e60a69c70d3b1b833048ccd711b8cfe36b22558122ffc234f98e1417aa97fa826ab2b2a3970b12ed852dc886d18f9b576d3c491620b54d17a87ba
- SSDEEP 3072:vLy2Kerc64CiGImVuX/N81rRLoPtU+3ZZYRGILCSihxnQDhGgb:vLy2Kwc64YIweIFOjIDLCSiDaQY
- TLSH T10FF31A2BE19723ACE6178278D7EA95B1E0787CA41533BD3D5B14FA302F30C645B7A918
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1