General
- Target 2026-10-22_b020d343cb534a10d7f3fafebb4a1936_elex_wannacry
- Size 87KB
- Sample261024-anpbcsey2t
- SHA256 d3b04d9d4904f3f45d3ac5adaf6782f87e81600d79a380455c2756684fd6b2df
- MD5 b020d343cb534a10d7f3fafebb4a1936
- SHA1 a750305d4df2e7169c2060e85054f52ff5e491af
- SHA512 64a9a9867bae5d4865684000c521d7d892f33e59078ce94f9ac831f55bb27f52f97e0c90de32996cad493c98da12f2b98b2fe914ae8ad34c400970d795625257
- SSDEEP 1536:2LsF2Kerc64sTiX2IV0DpK8SE9nYOzmEQkwpC:2Ly2Kerc64CiGIm1K851YO6EQkwpC
- TLSH T14B93A1763A259190C48BD138E8155AA0B932DCF52FF71303E6417AAC59B1E13CFAE8C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-22_b020d343cb534a10d7f3fafebb4a1936_elex_wannacry.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_b020d343cb534a10d7f3fafebb4a1936_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_b020d343cb534a10d7f3fafebb4a1936_elex_wannacry
- Size 87KB
- SHA256 d3b04d9d4904f3f45d3ac5adaf6782f87e81600d79a380455c2756684fd6b2df
- MD5 b020d343cb534a10d7f3fafebb4a1936
- SHA1 a750305d4df2e7169c2060e85054f52ff5e491af
- SHA512 64a9a9867bae5d4865684000c521d7d892f33e59078ce94f9ac831f55bb27f52f97e0c90de32996cad493c98da12f2b98b2fe914ae8ad34c400970d795625257
- SSDEEP 1536:2LsF2Kerc64sTiX2IV0DpK8SE9nYOzmEQkwpC:2Ly2Kerc64CiGIm1K851YO6EQkwpC
- TLSH T14B93A1763A259190C48BD138E8155AA0B932DCF52FF71303E6417AAC59B1E13CFAE8C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1