General
- Target 2026-10-28_c656178ae75c2f105e9e78bbdb2ef38d_elex_wannacry
- Size 32KB
- Sample261029-xnmtvssthx
- SHA256 c060f6fc7c0a69739c1368422eb750889f10869d21729fec118441b8b4c99d4a
- MD5 c656178ae75c2f105e9e78bbdb2ef38d
- SHA1 ee91163c8969f16deb2273269f6f1eb1d81543ba
- SHA512 a7174b0624e5381c76a98b9cccbb2628906c2a00f4e988d29f569328e0978b5efd63931060e120a50dad35e97c757175075cf553afc6af638c71899b26f518c4
- SSDEEP 768:2ZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqxNPWQH4lGg:iLsF2Kerc64sTiX2IV0D2h5
- TLSH T1BBE23A2B6AA17052C59320F0F9592F34C43D9DB9116BB062F7417B6928B2D63CF71ACE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-28_c656178ae75c2f105e9e78bbdb2ef38d_elex_wannacry.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-28_c656178ae75c2f105e9e78bbdb2ef38d_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-28_c656178ae75c2f105e9e78bbdb2ef38d_elex_wannacry
- Size 32KB
- SHA256 c060f6fc7c0a69739c1368422eb750889f10869d21729fec118441b8b4c99d4a
- MD5 c656178ae75c2f105e9e78bbdb2ef38d
- SHA1 ee91163c8969f16deb2273269f6f1eb1d81543ba
- SHA512 a7174b0624e5381c76a98b9cccbb2628906c2a00f4e988d29f569328e0978b5efd63931060e120a50dad35e97c757175075cf553afc6af638c71899b26f518c4
- SSDEEP 768:2ZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqxNPWQH4lGg:iLsF2Kerc64sTiX2IV0D2h5
- TLSH T1BBE23A2B6AA17052C59320F0F9592F34C43D9DB9116BB062F7417B6928B2D63CF71ACE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1