General
- Target 2026-05-23_c7dc328040517ada01c378929d3a6b38_cobalt-strike_darkgate_satacom_stop_wannacry
- Size 2.7MB
- Sample260523-cbb7daax6k
- SHA256 d6cbcf658c313141733e42d7dddfb1bb86e381db86bdafdf9d54e395f1986ee7
- MD5 c7dc328040517ada01c378929d3a6b38
- SHA1 2e23d5ba9b1e611d1f1037aa790db8c8c788e5df
- SHA512 f97df15b4c8fe0025ed9b9240adc8c65ba51346ee92a071a91d65eeae6bc84b22aa793c02a2743eddde1612bb847f5f406d56e53ab999b77e4ff4b9545adc0ae
- SSDEEP 49152:kLgVLKRWTQ6Zs5DhgPLkLgVLKRWTQ6Zs5DhgPL5Dd79WC7:dKRuy5a5KRuy5a9p7V
- TLSH T1B1D58D12A7D54036F6B33930467FA7356D7EBA210B74858F53841A7E4E72AC09E3932B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-23_c7dc328040517ada01c378929d3a6b38_cobalt-strike_darkgate_satacom_stop_wannacry.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-23_c7dc328040517ada01c378929d3a6b38_cobalt-strike_darkgate_satacom_stop_wannacry.exe
Resource
win11-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-23_c7dc328040517ada01c378929d3a6b38_cobalt-strike_darkgate_satacom_stop_wannacry
- Size 2.7MB
- SHA256 d6cbcf658c313141733e42d7dddfb1bb86e381db86bdafdf9d54e395f1986ee7
- MD5 c7dc328040517ada01c378929d3a6b38
- SHA1 2e23d5ba9b1e611d1f1037aa790db8c8c788e5df
- SHA512 f97df15b4c8fe0025ed9b9240adc8c65ba51346ee92a071a91d65eeae6bc84b22aa793c02a2743eddde1612bb847f5f406d56e53ab999b77e4ff4b9545adc0ae
- SSDEEP 49152:kLgVLKRWTQ6Zs5DhgPLkLgVLKRWTQ6Zs5DhgPL5Dd79WC7:dKRuy5a5KRuy5a9p7V
- TLSH T1B1D58D12A7D54036F6B33930467FA7356D7EBA210B74858F53841A7E4E72AC09E3932B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.