General
- Target 2026-10-27_efaed104d3d5180230cd0087b76a6c6f_elex_wannacry
- Size 36KB
- Sample261027-2fb5lsvy5k
- SHA256 a8f7a53e798bf456f3f220390c50644fb3bb683d7ff54ae8ee48861d186ee527
- MD5 efaed104d3d5180230cd0087b76a6c6f
- SHA1 7f12d3972fcc4810a1467d5c5175d5c6c2c079aa
- SHA512 058dba7a8ef9bc67e5b96ec6148e8a0acfcabbc0c044feba1e7d0b9eb20939113de2de14c0be497dee24d9428633b0c78464f4e49b9225a58847dd5aa8403c93
- SSDEEP 768:qZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqKNPWQHpi:OLsF2Kerc64sTiX2IV0Dhui
- TLSH T1D9F23A1B2AA17052C59320B0FA991F34C57D4CB6116BB066FB417B6928B2D63CFB0DDE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-27_efaed104d3d5180230cd0087b76a6c6f_elex_wannacry.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-27_efaed104d3d5180230cd0087b76a6c6f_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-27_efaed104d3d5180230cd0087b76a6c6f_elex_wannacry
- Size 36KB
- SHA256 a8f7a53e798bf456f3f220390c50644fb3bb683d7ff54ae8ee48861d186ee527
- MD5 efaed104d3d5180230cd0087b76a6c6f
- SHA1 7f12d3972fcc4810a1467d5c5175d5c6c2c079aa
- SHA512 058dba7a8ef9bc67e5b96ec6148e8a0acfcabbc0c044feba1e7d0b9eb20939113de2de14c0be497dee24d9428633b0c78464f4e49b9225a58847dd5aa8403c93
- SSDEEP 768:qZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqKNPWQHpi:OLsF2Kerc64sTiX2IV0Dhui
- TLSH T1D9F23A1B2AA17052C59320B0FA991F34C57D4CB6116BB066FB417B6928B2D63CFB0DDE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1