General
- Target 2026-10-26_e1859dcb03f8b09b0ac5b65337b5c037_elex_wannacry
- Size 88KB
- Sample261027-e8ygzscf74
- SHA256 4362e1f68f3edddf7e7f6825057499ce81f5abd5fdd682b31c02bbb3f0aa10e1
- MD5 e1859dcb03f8b09b0ac5b65337b5c037
- SHA1 04f347a8e56429bc31e655c2f631c86fcab9eb86
- SHA512 461d18aaff497fbe4e3b51b86d74aab847b478fe2ceee535ab0f62c5076fd7f17efacb599262872c8545d496b916fb04c4d01a4f5de4466d5699466f7662d6f8
- SSDEEP 1536:5LsF2Kerc64sTiX2IV0DVk2Lbuzc/9yH8Ky9193jiT5l364KlVk937tgrW:5Ly2Kerc64CiGImRRLyzc/9yH8Ka193e
- TLSH T184934B8F73251205D9770979A2052F19AC3DADE78357A04CA7C4B1693833D3ACB3F6A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-26_e1859dcb03f8b09b0ac5b65337b5c037_elex_wannacry.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_e1859dcb03f8b09b0ac5b65337b5c037_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_e1859dcb03f8b09b0ac5b65337b5c037_elex_wannacry
- Size 88KB
- SHA256 4362e1f68f3edddf7e7f6825057499ce81f5abd5fdd682b31c02bbb3f0aa10e1
- MD5 e1859dcb03f8b09b0ac5b65337b5c037
- SHA1 04f347a8e56429bc31e655c2f631c86fcab9eb86
- SHA512 461d18aaff497fbe4e3b51b86d74aab847b478fe2ceee535ab0f62c5076fd7f17efacb599262872c8545d496b916fb04c4d01a4f5de4466d5699466f7662d6f8
- SSDEEP 1536:5LsF2Kerc64sTiX2IV0DVk2Lbuzc/9yH8Ky9193jiT5l364KlVk937tgrW:5Ly2Kerc64CiGImRRLyzc/9yH8Ka193e
- TLSH T184934B8F73251205D9770979A2052F19AC3DADE78357A04CA7C4B1693833D3ACB3F6A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1