General
- Target 2026-10-28_5b847eb32942490451b1fbd8261cd633_elex_wannacry
- Size 95KB
- Sample261030-ec1mgaws7j
- SHA256 165ffa5c4ceba4f9671085e33adffdd7224ab9d5fda86c50130e784f02b42b4f
- MD5 5b847eb32942490451b1fbd8261cd633
- SHA1 56947a8b45cfd90abe51f3f65a4917166c44c919
- SHA512 0438d8e3d9030e4f6c7430263638bb6182962021c5469f582d1d22015b1f90720d9b50812c45d204cecf1677f449170ca6b46a7735c1f96c1e8200c3ab8d84d0
- SSDEEP 1536:ELsF2Kerc64sTiX2IV0DeRJdShIPoANJLlAXuSXv+qSFEAeOFN4:ELy2Kerc64CiGImqRJshIPFJRAhP2EAs
- TLSH T1C093BE176B985052D88A0570CA7F4F3584387C791426E223B7C27A1F2DB2A52EF73ADD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-28_5b847eb32942490451b1fbd8261cd633_elex_wannacry.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-28_5b847eb32942490451b1fbd8261cd633_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-28_5b847eb32942490451b1fbd8261cd633_elex_wannacry
- Size 95KB
- SHA256 165ffa5c4ceba4f9671085e33adffdd7224ab9d5fda86c50130e784f02b42b4f
- MD5 5b847eb32942490451b1fbd8261cd633
- SHA1 56947a8b45cfd90abe51f3f65a4917166c44c919
- SHA512 0438d8e3d9030e4f6c7430263638bb6182962021c5469f582d1d22015b1f90720d9b50812c45d204cecf1677f449170ca6b46a7735c1f96c1e8200c3ab8d84d0
- SSDEEP 1536:ELsF2Kerc64sTiX2IV0DeRJdShIPoANJLlAXuSXv+qSFEAeOFN4:ELy2Kerc64CiGImqRJshIPFJRAhP2EAs
- TLSH T1C093BE176B985052D88A0570CA7F4F3584387C791426E223B7C27A1F2DB2A52EF73ADD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1