General
- Target 2026-11-06_cf0f4b10821e40321125f3e5d965dbe3_elex_wannacry
- Size 32KB
- Sample261107-2vtcfagv4k
- SHA256 a864df1a299038f96aeb1f68275eaef45b979c7c2f0b18f4a0a755a70ff13093
- MD5 cf0f4b10821e40321125f3e5d965dbe3
- SHA1 f3bf33b4652e77461bf242efc0c51d9a8f89fa64
- SHA512 6d92b084fe1ba1d48a8c79ea8376b9344cc25c7af53412d66cbacdfc794baf44a0ef59c2bd78c369a5a7cbfd6dffbcdc5629d89da50034438918824de33d334e
- SSDEEP 768:zZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqZNPWQH2mm:dLsF2Kerc64sTiX2IV0DOTmm
- TLSH T1FBE23A2B6AA17052C59720F0F9592F34C43D9DB9016BB0A2F7417B6928B2D63CF719CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-06_cf0f4b10821e40321125f3e5d965dbe3_elex_wannacry.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-06_cf0f4b10821e40321125f3e5d965dbe3_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-06_cf0f4b10821e40321125f3e5d965dbe3_elex_wannacry
- Size 32KB
- SHA256 a864df1a299038f96aeb1f68275eaef45b979c7c2f0b18f4a0a755a70ff13093
- MD5 cf0f4b10821e40321125f3e5d965dbe3
- SHA1 f3bf33b4652e77461bf242efc0c51d9a8f89fa64
- SHA512 6d92b084fe1ba1d48a8c79ea8376b9344cc25c7af53412d66cbacdfc794baf44a0ef59c2bd78c369a5a7cbfd6dffbcdc5629d89da50034438918824de33d334e
- SSDEEP 768:zZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqZNPWQH2mm:dLsF2Kerc64sTiX2IV0DOTmm
- TLSH T1FBE23A2B6AA17052C59720F0F9592F34C43D9DB9016BB0A2F7417B6928B2D63CF719CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Juko
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1