General
- Target 2026-10-25_bd0d4bada1437924a211b0e788e65151_elex_wannacry
- Size 59KB
- Sample261026-repdfas19p
- SHA256 7f792cb9dfa8d239cd3b51b8bd8a54da41c40dc598d113cf4413930c26389a7b
- MD5 bd0d4bada1437924a211b0e788e65151
- SHA1 9970439e95db7aa1dcd163c23d92f22528132766
- SHA512 73a9d70b5a15d6069ab90c54f784c3d42e6d2ec570505972fce15df1c227a674fcbab7ea7acccfaaec897c19f1c325631472c87c0d27727800fdb9b53e935d87
- SSDEEP 768:ZZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqKNPWQHpg:jLsF2Kerc64sTiX2IV0Dhug
- TLSH T17A53268D5B85C880DE805A790E5A25EA0CBD6E96EF3A73D187063BC4367354A63FF4C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-25_bd0d4bada1437924a211b0e788e65151_elex_wannacry.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-25_bd0d4bada1437924a211b0e788e65151_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-25_bd0d4bada1437924a211b0e788e65151_elex_wannacry
- Size 59KB
- SHA256 7f792cb9dfa8d239cd3b51b8bd8a54da41c40dc598d113cf4413930c26389a7b
- MD5 bd0d4bada1437924a211b0e788e65151
- SHA1 9970439e95db7aa1dcd163c23d92f22528132766
- SHA512 73a9d70b5a15d6069ab90c54f784c3d42e6d2ec570505972fce15df1c227a674fcbab7ea7acccfaaec897c19f1c325631472c87c0d27727800fdb9b53e935d87
- SSDEEP 768:ZZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqKNPWQHpg:jLsF2Kerc64sTiX2IV0Dhug
- TLSH T17A53268D5B85C880DE805A790E5A25EA0CBD6E96EF3A73D187063BC4367354A63FF4C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1