General
- Target 2026-04-24_37c0b0f5d490760a24c97bc15be7328f_cobalt-strike_satacom_vidar_wannacry
- Size 612KB
- Sample260424-jcfphscw2k
- SHA256 e07076ea98ed43d44764b4b5ab1caa2b80c94f7b9e3e707a86b492668c4257ca
- MD5 37c0b0f5d490760a24c97bc15be7328f
- SHA1 561fc15b391511df9cb3d64b16b68fbe820d1854
- SHA512 801201898b0c33f81f2cd332c997c61f3a4f59f0bc9a4a3dff19a74ffa26f3230ca18dfcaffa1796dfeb774d494ce08a0411b6d2149f56914e637de40b3e9151
- SSDEEP 6144:s85jux87cqXaAoNOcG20bWiT6yj7FzhQXJgzBU4GfjTan6q/eMYbxYxAVxr1DY6R:J5jtoYymh7vagb/6xFv61Cag
- TLSH T1E0D4491D62AA1099E5B29634C9628151EA73BC721B2197CF13D0D57E9F33BC8BE38F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-24_37c0b0f5d490760a24c97bc15be7328f_cobalt-strike_satacom_vidar_wannacry.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-24_37c0b0f5d490760a24c97bc15be7328f_cobalt-strike_satacom_vidar_wannacry.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-24_37c0b0f5d490760a24c97bc15be7328f_cobalt-strike_satacom_vidar_wannacry
- Size 612KB
- SHA256 e07076ea98ed43d44764b4b5ab1caa2b80c94f7b9e3e707a86b492668c4257ca
- MD5 37c0b0f5d490760a24c97bc15be7328f
- SHA1 561fc15b391511df9cb3d64b16b68fbe820d1854
- SHA512 801201898b0c33f81f2cd332c997c61f3a4f59f0bc9a4a3dff19a74ffa26f3230ca18dfcaffa1796dfeb774d494ce08a0411b6d2149f56914e637de40b3e9151
- SSDEEP 6144:s85jux87cqXaAoNOcG20bWiT6yj7FzhQXJgzBU4GfjTan6q/eMYbxYxAVxr1DY6R:J5jtoYymh7vagb/6xFv61Cag
- TLSH T1E0D4491D62AA1099E5B29634C9628151EA73BC721B2197CF13D0D57E9F33BC8BE38F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.