General
- Target 2026-10-28_1266d127708dc2bd9f3225c22f28897a_elex_wannacry
- Size 35KB
- Sample261030-l33m3sys8p
- SHA256 5ad0da50a316e5aeeced37b4a341f50fd7eec00122c6406f2ebb66a222debca6
- MD5 1266d127708dc2bd9f3225c22f28897a
- SHA1 746d27fed313dffd60a6c3d7b23d0a25ad93661f
- SHA512 e09cf51d5855d11aa19b2005e8b52e26d38917c87ce71a74aafaf53c1b46d0a31a1384a09323ee20898794bfebb3669e69d324eb4970c13a0e360bf16ee8923c
- SSDEEP 768:9ZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqKNPWQHpX/Nm:vLsF2Kerc64sTiX2IV0DhuX/Nm
- TLSH T1B3F23B1A6AA16042E59314B0FDA91F34C47D9C76217BB06BE7403A1928B2D57CF70FDE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-28_1266d127708dc2bd9f3225c22f28897a_elex_wannacry.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-28_1266d127708dc2bd9f3225c22f28897a_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-28_1266d127708dc2bd9f3225c22f28897a_elex_wannacry
- Size 35KB
- SHA256 5ad0da50a316e5aeeced37b4a341f50fd7eec00122c6406f2ebb66a222debca6
- MD5 1266d127708dc2bd9f3225c22f28897a
- SHA1 746d27fed313dffd60a6c3d7b23d0a25ad93661f
- SHA512 e09cf51d5855d11aa19b2005e8b52e26d38917c87ce71a74aafaf53c1b46d0a31a1384a09323ee20898794bfebb3669e69d324eb4970c13a0e360bf16ee8923c
- SSDEEP 768:9ZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqKNPWQHpX/Nm:vLsF2Kerc64sTiX2IV0DhuX/Nm
- TLSH T1B3F23B1A6AA16042E59314B0FDA91F34C47D9C76217BB06BE7403A1928B2D57CF70FDE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1