General
- Target 2026-10-22_261ec9d6ec77ffffd86689a70da7a435_elex_wannacry
- Size 216KB
- Sample261024-xff2cadv3p
- SHA256 e5133172d433ab33119bc731f74800ec3c690f4b9712465e5740db4cb3e510a6
- MD5 261ec9d6ec77ffffd86689a70da7a435
- SHA1 5e5bf57c435439ae090b756d27b2c54498b39865
- SHA512 bebdf666cd07c5fd8083287d6c7592adf26298342f6af0f4a9f937d758f3f1bf5de6141ccd894466e66c0f5e8c42f7fa3e166ce76f5f4f2aa9d30b425e14b863
- SSDEEP 3072:uLy2Kerc64CiGImRRLytU+3ZZYRGILCSihxnQDhGgV:uLy2Kwc64YIcyjIDLCSiDaQa
- TLSH T1D3240A2B905330ACDA1782BCD7EA9671E4747CA41532BD7D5B28FA302F31C616F7A858
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-22_261ec9d6ec77ffffd86689a70da7a435_elex_wannacry.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_261ec9d6ec77ffffd86689a70da7a435_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_261ec9d6ec77ffffd86689a70da7a435_elex_wannacry
- Size 216KB
- SHA256 e5133172d433ab33119bc731f74800ec3c690f4b9712465e5740db4cb3e510a6
- MD5 261ec9d6ec77ffffd86689a70da7a435
- SHA1 5e5bf57c435439ae090b756d27b2c54498b39865
- SHA512 bebdf666cd07c5fd8083287d6c7592adf26298342f6af0f4a9f937d758f3f1bf5de6141ccd894466e66c0f5e8c42f7fa3e166ce76f5f4f2aa9d30b425e14b863
- SSDEEP 3072:uLy2Kerc64CiGImRRLytU+3ZZYRGILCSihxnQDhGgV:uLy2Kwc64YIcyjIDLCSiDaQa
- TLSH T1D3240A2B905330ACDA1782BCD7EA9671E4747CA41532BD7D5B28FA302F31C616F7A858
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1