General
- Target 2026-10-26_99d8054fd70cb33e4416e6adfd2e589f_elex_wannacry
- Size 90KB
- Sample261027-m779sscv2t
- SHA256 e267097fd61174b91015e1c887021616014ebc896bfaa74f4471818a69c94c07
- MD5 99d8054fd70cb33e4416e6adfd2e589f
- SHA1 cf157bf0a0a27de7cf8472422660f8527efbcb4e
- SHA512 16245ec563d6921c026e3234e0473b3b52b76d6cb6e89e898e438ffa59719a7140c7a9ee8d1a4a4ed7c7a61c98043d82d393c4dc686c1f487806755b04514836
- SSDEEP 1536:vLsF2Kerc64sTiX2IV0DhuX/N+ASX1rRLowsDtU1E3ZYa6jK0GIh9E/v:vLy2Kerc64CiGImVuX/N81rRLoPtU+3N
- TLSH T1A3933A1BF18A279CF6178274DAAA5A70A0BD7CB44533BC3E6B14F2302F71C219B25959
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-26_99d8054fd70cb33e4416e6adfd2e589f_elex_wannacry.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_99d8054fd70cb33e4416e6adfd2e589f_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_99d8054fd70cb33e4416e6adfd2e589f_elex_wannacry
- Size 90KB
- SHA256 e267097fd61174b91015e1c887021616014ebc896bfaa74f4471818a69c94c07
- MD5 99d8054fd70cb33e4416e6adfd2e589f
- SHA1 cf157bf0a0a27de7cf8472422660f8527efbcb4e
- SHA512 16245ec563d6921c026e3234e0473b3b52b76d6cb6e89e898e438ffa59719a7140c7a9ee8d1a4a4ed7c7a61c98043d82d393c4dc686c1f487806755b04514836
- SSDEEP 1536:vLsF2Kerc64sTiX2IV0DhuX/N+ASX1rRLowsDtU1E3ZYa6jK0GIh9E/v:vLy2Kerc64CiGImVuX/N81rRLoPtU+3N
- TLSH T1A3933A1BF18A279CF6178274DAAA5A70A0BD7CB44533BC3E6B14F2302F71C219B25959
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1