General
- Target 2026-11-03_371a136f065f60ed2fefdd98889022e3_elex_wannacry
- Size 49KB
- Sample261104-3tryna1w6j
- SHA256 8ac11574f77fc163680fdee9c1c6d43487a74a8f1f2dadefefd1aa50da999193
- MD5 371a136f065f60ed2fefdd98889022e3
- SHA1 638a1e7f37869985026d98db8223f0b3ae31356a
- SHA512 dfa94877d0a2689765a83df5d891de6c8cf312703a4f870e4e235d6df03d320dce13990f3f76c20a09cdf43aa9d500b4423fd283c3c6a6da36fcf5f35b8e6b16
- SSDEEP 1536:VLsF2Kerc64sTiX2IV0Dhuj4p4kojVR6h22:VLy2Kerc64CiGImVu8p4kojWh22
- TLSH T146334C0A2BD650C2D56205B0E99A0F75833FDC3A2127A75EE740765A1C72D6BCF30E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-03_371a136f065f60ed2fefdd98889022e3_elex_wannacry.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-03_371a136f065f60ed2fefdd98889022e3_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-03_371a136f065f60ed2fefdd98889022e3_elex_wannacry
- Size 49KB
- SHA256 8ac11574f77fc163680fdee9c1c6d43487a74a8f1f2dadefefd1aa50da999193
- MD5 371a136f065f60ed2fefdd98889022e3
- SHA1 638a1e7f37869985026d98db8223f0b3ae31356a
- SHA512 dfa94877d0a2689765a83df5d891de6c8cf312703a4f870e4e235d6df03d320dce13990f3f76c20a09cdf43aa9d500b4423fd283c3c6a6da36fcf5f35b8e6b16
- SSDEEP 1536:VLsF2Kerc64sTiX2IV0Dhuj4p4kojVR6h22:VLy2Kerc64CiGImVu8p4kojWh22
- TLSH T146334C0A2BD650C2D56205B0E99A0F75833FDC3A2127A75EE740765A1C72D6BCF30E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1