General
- Target 2026-10-22_ec5a644aa3b3795fe9234e20555add8c_elex_wannacry
- Size 42KB
- Sample261023-ef52cswthv
- SHA256 2a50a8b30ce8c6e73a1bb8b7aad6bc1c4a44cf9c80b8a41bfe32af72da24c3df
- MD5 ec5a644aa3b3795fe9234e20555add8c
- SHA1 c2dd65a1bcc490a885156542645de4468cd74bfd
- SHA512 a87fc188a64e68c958e51793696a6d736e4645640fef139e42965e801ed541a8f28aa65169efb7440bf342ea9d2c8b38c16e7c13f883cedef3eebd7101a221f7
- SSDEEP 768:zNZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqPNPWQHXFMcnrfrqx4RgutbGHix8f41Y:z/LsF2Kerc64sTiX2IV0DgsfrfWJF2+f
- TLSH T19D13171776A460D2CDB76074E91A4E30437E9CF664A7B317A72076202DB3D5ACFA02CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-22_ec5a644aa3b3795fe9234e20555add8c_elex_wannacry.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_ec5a644aa3b3795fe9234e20555add8c_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_ec5a644aa3b3795fe9234e20555add8c_elex_wannacry
- Size 42KB
- SHA256 2a50a8b30ce8c6e73a1bb8b7aad6bc1c4a44cf9c80b8a41bfe32af72da24c3df
- MD5 ec5a644aa3b3795fe9234e20555add8c
- SHA1 c2dd65a1bcc490a885156542645de4468cd74bfd
- SHA512 a87fc188a64e68c958e51793696a6d736e4645640fef139e42965e801ed541a8f28aa65169efb7440bf342ea9d2c8b38c16e7c13f883cedef3eebd7101a221f7
- SSDEEP 768:zNZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqPNPWQHXFMcnrfrqx4RgutbGHix8f41Y:z/LsF2Kerc64sTiX2IV0DgsfrfWJF2+f
- TLSH T19D13171776A460D2CDB76074E91A4E30437E9CF664A7B317A72076202DB3D5ACFA02CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1