General
- Target 2026-10-22_f85f04a156004082d7a354a544c45daa_elex_wannacry
- Size 42KB
- Sample261023-btbswsg13x
- SHA256 a3c5c4227b31d2e8ebc4e5bc716e4f7da8ccff0bb62c1fd2bdbc745af050c486
- MD5 f85f04a156004082d7a354a544c45daa
- SHA1 b1c99ace10aa59ba4906d05a9c2f1aa83faadf78
- SHA512 5fd4d929aaf9890248bf731e017b96e695a8af833789a44d61eec45d623a73d4fc3cb9d7d0679b3512c42a37eaff08597cc2c942ce6b4325fbb18d764978b7f0
- SSDEEP 768:zNZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqPNPWQHXFMcnrfrqx4RgutbGHix8f41z:z/LsF2Kerc64sTiX2IV0DgsfrfWJF2+Y
- TLSH T11413171776A460D2CDB76074E91A5E30437E9CF664A7B317A72076202DB3D5ACFA02CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-22_f85f04a156004082d7a354a544c45daa_elex_wannacry.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_f85f04a156004082d7a354a544c45daa_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_f85f04a156004082d7a354a544c45daa_elex_wannacry
- Size 42KB
- SHA256 a3c5c4227b31d2e8ebc4e5bc716e4f7da8ccff0bb62c1fd2bdbc745af050c486
- MD5 f85f04a156004082d7a354a544c45daa
- SHA1 b1c99ace10aa59ba4906d05a9c2f1aa83faadf78
- SHA512 5fd4d929aaf9890248bf731e017b96e695a8af833789a44d61eec45d623a73d4fc3cb9d7d0679b3512c42a37eaff08597cc2c942ce6b4325fbb18d764978b7f0
- SSDEEP 768:zNZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqPNPWQHXFMcnrfrqx4RgutbGHix8f41z:z/LsF2Kerc64sTiX2IV0DgsfrfWJF2+Y
- TLSH T11413171776A460D2CDB76074E91A5E30437E9CF664A7B317A72076202DB3D5ACFA02CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1