General
- Target 2026-10-28_a971fa2485ddc93140fd85d8ac017a78_elex_wannacry
- Size 64KB
- Sample261029-1cs4aatv4m
- SHA256 1c32f840470d7e72bd48044a74fdac5984a629026561945079fcc40f8973e693
- MD5 a971fa2485ddc93140fd85d8ac017a78
- SHA1 cc7d865caf1860ace607cbb57d73efc1d6dc7a7b
- SHA512 865e8f51292798db6d13aefd56bfd6ceac92bb940f0cf94504507d13a134783fc2bcd3efd2b36dd1c65fd6acddb5cda356ab0999b7cb391ae4813c7da3cdbfb3
- SSDEEP 1536:t2LsF2Kerc64sTiX2IV0DOlOy6vlvqxy2dnNJfXlNWbITDf:t2Ly2Kerc64CiGImClOyqlvGdnNJfG8H
- TLSH T13D5338173BE554C2E1E606706DB68F78847BFC704A23D51AB780720E1C75E62DE31BAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-28_a971fa2485ddc93140fd85d8ac017a78_elex_wannacry.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-28_a971fa2485ddc93140fd85d8ac017a78_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-28_a971fa2485ddc93140fd85d8ac017a78_elex_wannacry
- Size 64KB
- SHA256 1c32f840470d7e72bd48044a74fdac5984a629026561945079fcc40f8973e693
- MD5 a971fa2485ddc93140fd85d8ac017a78
- SHA1 cc7d865caf1860ace607cbb57d73efc1d6dc7a7b
- SHA512 865e8f51292798db6d13aefd56bfd6ceac92bb940f0cf94504507d13a134783fc2bcd3efd2b36dd1c65fd6acddb5cda356ab0999b7cb391ae4813c7da3cdbfb3
- SSDEEP 1536:t2LsF2Kerc64sTiX2IV0DOlOy6vlvqxy2dnNJfXlNWbITDf:t2Ly2Kerc64CiGImClOyqlvGdnNJfG8H
- TLSH T13D5338173BE554C2E1E606706DB68F78847BFC704A23D51AB780720E1C75E62DE31BAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1