General
- Target 2026-10-30_9170ee2082aa04cd208a6f4457a974bb_elex_wannacry
- Size 90KB
- Sample261030-13fwmsff58
- SHA256 8f921a0b9929af7742faced191b94f3313c8cc24c054575e3f17f6a415c5acc0
- MD5 9170ee2082aa04cd208a6f4457a974bb
- SHA1 86f7df95dc2531e6ba708e4a3596e4290612a906
- SHA512 720abd8844d624471dbc3a377c46b97bed15afa874607655c11f0ccfd2bca6f37971e658e6c502b7acc370a4f725348d69f8fff56f2c738b66cdf8ae4887a2d7
- SSDEEP 1536:vLsF2Kerc64sTiX2IV0DhuX/N+ASX1rRLowsDtU1E3ZYa6jK0GIh9E/H:vLy2Kerc64CiGImVuX/N81rRLoPtU+39
- TLSH T16F933A1BF18A279CF6178274DAAA5A70A0BD7CB44533FC3E6B14F2302F71C219B25959
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-30_9170ee2082aa04cd208a6f4457a974bb_elex_wannacry.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-30_9170ee2082aa04cd208a6f4457a974bb_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-30_9170ee2082aa04cd208a6f4457a974bb_elex_wannacry
- Size 90KB
- SHA256 8f921a0b9929af7742faced191b94f3313c8cc24c054575e3f17f6a415c5acc0
- MD5 9170ee2082aa04cd208a6f4457a974bb
- SHA1 86f7df95dc2531e6ba708e4a3596e4290612a906
- SHA512 720abd8844d624471dbc3a377c46b97bed15afa874607655c11f0ccfd2bca6f37971e658e6c502b7acc370a4f725348d69f8fff56f2c738b66cdf8ae4887a2d7
- SSDEEP 1536:vLsF2Kerc64sTiX2IV0DhuX/N+ASX1rRLowsDtU1E3ZYa6jK0GIh9E/H:vLy2Kerc64CiGImVuX/N81rRLoPtU+39
- TLSH T16F933A1BF18A279CF6178274DAAA5A70A0BD7CB44533FC3E6B14F2302F71C219B25959
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1