General
- Target 2026-10-28_5414ff07cf7b662e841dd25847bfa995_elex_wannacry
- Size 70KB
- Sample261030-e35n4saw4p
- SHA256 895740e84b0dee15f7ca6baae9c69999921b713bc7a72cdab0d656bd08f0bcd6
- MD5 5414ff07cf7b662e841dd25847bfa995
- SHA1 0ff958b6a2e7c7ba3e294b155bbecf0bae858bfe
- SHA512 a9d7cb93f716384f741dedb4359bebfa479d5011f4dd3bc3959c56c57abce3d6e9a665aa1eba5dba5cc7eaf1b6866a441db9c64471daf03f981b5c4519fa8a1e
- SSDEEP 1536:vLsF2Kerc64sTiX2IV0DhuX/N+ASX1rRLows3SE9nYOE:vLy2Kerc64CiGImVuX/N81rRLoD51YOE
- TLSH T1FA633906FB89DBD0F0534570E9560AA4747EACF18E63A51BB744730D2C72B16CF32A9A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-28_5414ff07cf7b662e841dd25847bfa995_elex_wannacry.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-28_5414ff07cf7b662e841dd25847bfa995_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-28_5414ff07cf7b662e841dd25847bfa995_elex_wannacry
- Size 70KB
- SHA256 895740e84b0dee15f7ca6baae9c69999921b713bc7a72cdab0d656bd08f0bcd6
- MD5 5414ff07cf7b662e841dd25847bfa995
- SHA1 0ff958b6a2e7c7ba3e294b155bbecf0bae858bfe
- SHA512 a9d7cb93f716384f741dedb4359bebfa479d5011f4dd3bc3959c56c57abce3d6e9a665aa1eba5dba5cc7eaf1b6866a441db9c64471daf03f981b5c4519fa8a1e
- SSDEEP 1536:vLsF2Kerc64sTiX2IV0DhuX/N+ASX1rRLows3SE9nYOE:vLy2Kerc64CiGImVuX/N81rRLoD51YOE
- TLSH T1FA633906FB89DBD0F0534570E9560AA4747EACF18E63A51BB744730D2C72B16CF32A9A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1