General
- Target 2026-10-29_11a61a26ff57541f73041d963c8443e9_elex_wannacry
- Size 133KB
- Sample261029-vsj8esew6j
- SHA256 df363ac513ce5c1f7f3132e5e0a0ee5129302c6e20e1e8ac0494bf88da6f97f5
- MD5 11a61a26ff57541f73041d963c8443e9
- SHA1 b1b265e67c235bb0a0d528f90993361efe670baa
- SHA512 eaa687d179f191024f80e6fe4262403fbfedfa5b8b5bbbd972df13c86e812568b1058415c98ca42f3c579e6d0f33f0778fda3ce8815f756a3fffa8ff4e21fc85
- SSDEEP 3072:bLy2Kerc64CiGImIX9UQpx7NQ/zc2cQgVI:bLy2Kwc64YIF3gk6
- TLSH T1B1D32818A7F40135EAB74B70FDF1145286B3BD172E26DA6C1A85368D0933B41CA72B6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-29_11a61a26ff57541f73041d963c8443e9_elex_wannacry.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-29_11a61a26ff57541f73041d963c8443e9_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-29_11a61a26ff57541f73041d963c8443e9_elex_wannacry
- Size 133KB
- SHA256 df363ac513ce5c1f7f3132e5e0a0ee5129302c6e20e1e8ac0494bf88da6f97f5
- MD5 11a61a26ff57541f73041d963c8443e9
- SHA1 b1b265e67c235bb0a0d528f90993361efe670baa
- SHA512 eaa687d179f191024f80e6fe4262403fbfedfa5b8b5bbbd972df13c86e812568b1058415c98ca42f3c579e6d0f33f0778fda3ce8815f756a3fffa8ff4e21fc85
- SSDEEP 3072:bLy2Kerc64CiGImIX9UQpx7NQ/zc2cQgVI:bLy2Kwc64YIF3gk6
- TLSH T1B1D32818A7F40135EAB74B70FDF1145286B3BD172E26DA6C1A85368D0933B41CA72B6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1