General
- Target 2026-03-14_93c48e9ca7e068f4a1d95f3c4d1580df_cobalt-strike_elex_wannacry
- Size 182KB
- Sample260314-crjamagx4l
- SHA256 540d0d0eea27f78d445ace34dc1b71a101efa2456b5ae2c5e04026f2b7a8c9b5
- MD5 93c48e9ca7e068f4a1d95f3c4d1580df
- SHA1 db2ea410c4a415939f9fd8c3e0661cffb1b90c10
- SHA512 eb004da1e11dbd16331233c9c8acf0a37151559ca474af483b8e808a6e1b0fc11b10143a24e3fccaec6fcdc6a1ce9441db546cc8adb46333ddfdef49f6466686
- SSDEEP 3072:ylLyEzE1d3j5Vj9UbB6QJK9D7AKf3+VyJz+HfsP88JJ/GjZ7GYx:ylLyEQ1dtVCboUK1AJVAzoEnejZP
- TLSH T1BA04AE38BBD1E1B7C4E71474AC54A53C2BBA862347661A11C8940DEE6D73FED472CA32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-03-14_93c48e9ca7e068f4a1d95f3c4d1580df_cobalt-strike_elex_wannacry.exe
Resource
win10v2004-20260130-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-03-14_93c48e9ca7e068f4a1d95f3c4d1580df_cobalt-strike_elex_wannacry.exe
Resource
win11-20260130-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-03-14_93c48e9ca7e068f4a1d95f3c4d1580df_cobalt-strike_elex_wannacry
- Size 182KB
- SHA256 540d0d0eea27f78d445ace34dc1b71a101efa2456b5ae2c5e04026f2b7a8c9b5
- MD5 93c48e9ca7e068f4a1d95f3c4d1580df
- SHA1 db2ea410c4a415939f9fd8c3e0661cffb1b90c10
- SHA512 eb004da1e11dbd16331233c9c8acf0a37151559ca474af483b8e808a6e1b0fc11b10143a24e3fccaec6fcdc6a1ce9441db546cc8adb46333ddfdef49f6466686
- SSDEEP 3072:ylLyEzE1d3j5Vj9UbB6QJK9D7AKf3+VyJz+HfsP88JJ/GjZ7GYx:ylLyEQ1dtVCboUK1AJVAzoEnejZP
- TLSH T1BA04AE38BBD1E1B7C4E71474AC54A53C2BBA862347661A11C8940DEE6D73FED472CA32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Clop family
-
clop
Ransomware discovered in early 2019 which has been actively developed since release.
-
Detects executables containing commands for clearing Windows Event Logs