General
- Target 2026-10-27_eb4893d24a42cc4d81ca748966832451_elex_wannacry
- Size 67KB
- Sample261027-28pleaxvas
- SHA256 6474c5c4d5e74be42d62f175611e380d9e72dc7c477123e11e8b4f4232b66245
- MD5 eb4893d24a42cc4d81ca748966832451
- SHA1 111b4222cb8a13a487af6affe7f005d58899bde4
- SHA512 a894806fc2d70de184a6518bca9d433353978cf84aea9f2e8182d93825779837898bf01020733d181e877d7084619427595eacf8172d17d7b12b33d38a87d3f2
- SSDEEP 1536:aLsF2Kerc64sTiX2IV0DVyIGFoyyCwlAY0VdTQ2:aLy2Kerc64CiGImRylFyp8TV
- TLSH T1B8633B16B950B032D99211B46A6D6B36817A9DF10707A0D3F7407ADD28F2BD2EF346CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-27_eb4893d24a42cc4d81ca748966832451_elex_wannacry.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-27_eb4893d24a42cc4d81ca748966832451_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-27_eb4893d24a42cc4d81ca748966832451_elex_wannacry
- Size 67KB
- SHA256 6474c5c4d5e74be42d62f175611e380d9e72dc7c477123e11e8b4f4232b66245
- MD5 eb4893d24a42cc4d81ca748966832451
- SHA1 111b4222cb8a13a487af6affe7f005d58899bde4
- SHA512 a894806fc2d70de184a6518bca9d433353978cf84aea9f2e8182d93825779837898bf01020733d181e877d7084619427595eacf8172d17d7b12b33d38a87d3f2
- SSDEEP 1536:aLsF2Kerc64sTiX2IV0DVyIGFoyyCwlAY0VdTQ2:aLy2Kerc64CiGImRylFyp8TV
- TLSH T1B8633B16B950B032D99211B46A6D6B36817A9DF10707A0D3F7407ADD28F2BD2EF346CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1