General
- Target 2026-11-09_bd23c2437a40e8f8b06c9b75a04490be_elex_wannacry
- Size 88KB
- Sample261110-m8dftaas31
- SHA256 363e3c867c59a1846b2b651b1c3eda6b9f5c268ac32eac6decaa9c0b083d4db9
- MD5 bd23c2437a40e8f8b06c9b75a04490be
- SHA1 d340f151cb4d8888d58fcbc6bdaf661d0e1fecf6
- SHA512 71e346bc0d8dd6728be924af3a7f88bcf3fc9e7f09d2a246ae96ce60a1ee2c3967677c29208cd69ab20667c3d43ce86558f9fc8d557ae19caff3ced45d886aed
- SSDEEP 1536:5LsF2Kerc64sTiX2IV0DVk2Lbuzc/9yH8Ky9193jiT5l364KlVk937tgrm:5Ly2Kerc64CiGImRRLyzc/9yH8Ka193O
- TLSH T136934A8F73251205D9770979A2052F19AC3DADE78357A04CA7C4B1693833D3ACB3F6A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-09_bd23c2437a40e8f8b06c9b75a04490be_elex_wannacry.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-09_bd23c2437a40e8f8b06c9b75a04490be_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-09_bd23c2437a40e8f8b06c9b75a04490be_elex_wannacry
- Size 88KB
- SHA256 363e3c867c59a1846b2b651b1c3eda6b9f5c268ac32eac6decaa9c0b083d4db9
- MD5 bd23c2437a40e8f8b06c9b75a04490be
- SHA1 d340f151cb4d8888d58fcbc6bdaf661d0e1fecf6
- SHA512 71e346bc0d8dd6728be924af3a7f88bcf3fc9e7f09d2a246ae96ce60a1ee2c3967677c29208cd69ab20667c3d43ce86558f9fc8d557ae19caff3ced45d886aed
- SSDEEP 1536:5LsF2Kerc64sTiX2IV0DVk2Lbuzc/9yH8Ky9193jiT5l364KlVk937tgrm:5Ly2Kerc64CiGImRRLyzc/9yH8Ka193O
- TLSH T136934A8F73251205D9770979A2052F19AC3DADE78357A04CA7C4B1693833D3ACB3F6A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Juko
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1