General
- Target 2026-04-16_e95257ecba64656943cdbf5dca1a6e18_cobalt-strike_satacom_vidar_wannacry
- Size 2.0MB
- Sample260416-kbe72aa16p
- SHA256 a19f3f9aa7571b4e4ca858c292d747c21d27aea15e11dfeeccd21e263b19cd4d
- MD5 e95257ecba64656943cdbf5dca1a6e18
- SHA1 b024b71724a6aa7cdda777c2cc00ec1b107c57b5
- SHA512 691378b46a0ffe525ae3c8ff119747cfc12a1ac1ad501f329fd7078f5c64986309bb61b48ab622e4ee1a6f72f225d02fb275fa3ccc0bb5d959392b8c6203e67c
- SSDEEP 49152:e/ev6kC5v/ev6kC5YLgVLKRWTQ6Zs5DhgPm:wZ5HZ5pKRuy5am
- TLSH T1BBA56C1667E91125F6B37A70887992A1BE7A7D200B3483DF1740B63D1E329D0ED3972B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-16_e95257ecba64656943cdbf5dca1a6e18_cobalt-strike_satacom_vidar_wannacry.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-16_e95257ecba64656943cdbf5dca1a6e18_cobalt-strike_satacom_vidar_wannacry.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-16_e95257ecba64656943cdbf5dca1a6e18_cobalt-strike_satacom_vidar_wannacry
- Size 2.0MB
- SHA256 a19f3f9aa7571b4e4ca858c292d747c21d27aea15e11dfeeccd21e263b19cd4d
- MD5 e95257ecba64656943cdbf5dca1a6e18
- SHA1 b024b71724a6aa7cdda777c2cc00ec1b107c57b5
- SHA512 691378b46a0ffe525ae3c8ff119747cfc12a1ac1ad501f329fd7078f5c64986309bb61b48ab622e4ee1a6f72f225d02fb275fa3ccc0bb5d959392b8c6203e67c
- SSDEEP 49152:e/ev6kC5v/ev6kC5YLgVLKRWTQ6Zs5DhgPm:wZ5HZ5pKRuy5am
- TLSH T1BBA56C1667E91125F6B37A70887992A1BE7A7D200B3483DF1740B63D1E329D0ED3972B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.