General
- Target 2026-10-26_e5d8fa43d835cf775d8564a8a3482a04_elex_wannacry
- Size 67KB
- Sample261027-embfbs1vfy
- SHA256 76562a3bd8fa3bf8cc00027b8fe6aca283687a5493784d991995262eec42cdf3
- MD5 e5d8fa43d835cf775d8564a8a3482a04
- SHA1 879393bf144f92c836992c83a171705129027090
- SHA512 fb40e9d253ebd8567c668182594c4d16dbc90a5d54a38b7c82b9b343fef4b96c4f222e592e1ae73aa070815713ceff442431d018cad3494220836f1f5ef62696
- SSDEEP 1536:aLsF2Kerc64sTiX2IV0DVyIGFoyyCwlAY0VdTQN:aLy2Kerc64CiGImRylFyp8Ti
- TLSH T1BD633B16B950B032D99211B46A6D6B36817A9DF10707A0D3F7407ADD28F2BD2EF346CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-26_e5d8fa43d835cf775d8564a8a3482a04_elex_wannacry.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_e5d8fa43d835cf775d8564a8a3482a04_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_e5d8fa43d835cf775d8564a8a3482a04_elex_wannacry
- Size 67KB
- SHA256 76562a3bd8fa3bf8cc00027b8fe6aca283687a5493784d991995262eec42cdf3
- MD5 e5d8fa43d835cf775d8564a8a3482a04
- SHA1 879393bf144f92c836992c83a171705129027090
- SHA512 fb40e9d253ebd8567c668182594c4d16dbc90a5d54a38b7c82b9b343fef4b96c4f222e592e1ae73aa070815713ceff442431d018cad3494220836f1f5ef62696
- SSDEEP 1536:aLsF2Kerc64sTiX2IV0DVyIGFoyyCwlAY0VdTQN:aLy2Kerc64CiGImRylFyp8Ti
- TLSH T1BD633B16B950B032D99211B46A6D6B36817A9DF10707A0D3F7407ADD28F2BD2EF346CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1