General
- Target 2026-08-02_049a8db0276ca69e02ceedb98e0930a7_cobalt-strike_elex_upatre_wannacry
- Size 70KB
- Sample260802-k7p24sga89
- SHA256 1f3bee16003341823db05aefbe63c903942813a1809400e3459fba6d482cb1ce
- MD5 049a8db0276ca69e02ceedb98e0930a7
- SHA1 33f2f8cbfcc96277ca291eb849237e5e91fc9de6
- SHA512 572853e5a38087455c301344420b6dde24000d9f9f29d692f9f31ed96ee12393f4cafe439db14c94d39b11bf33b54c1c98ae2c6f4ffa3c803110e0d372c908cf
- SSDEEP 1536:KAtY4WvLKb7TQdL31Aq+3WdRqer9B+TfS+yK+d4c+n0wJ1z:Jtrw3mkRqer5+n0wn
- TLSH T19D63D51E76A9A4E3C6328A38A87542955322AC627FC017DB7FC473CD4D372D88D67B24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_049a8db0276ca69e02ceedb98e0930a7_cobalt-strike_elex_upatre_wannacry.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_049a8db0276ca69e02ceedb98e0930a7_cobalt-strike_elex_upatre_wannacry.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_049a8db0276ca69e02ceedb98e0930a7_cobalt-strike_elex_upatre_wannacry
- Size 70KB
- SHA256 1f3bee16003341823db05aefbe63c903942813a1809400e3459fba6d482cb1ce
- MD5 049a8db0276ca69e02ceedb98e0930a7
- SHA1 33f2f8cbfcc96277ca291eb849237e5e91fc9de6
- SHA512 572853e5a38087455c301344420b6dde24000d9f9f29d692f9f31ed96ee12393f4cafe439db14c94d39b11bf33b54c1c98ae2c6f4ffa3c803110e0d372c908cf
- SSDEEP 1536:KAtY4WvLKb7TQdL31Aq+3WdRqer9B+TfS+yK+d4c+n0wJ1z:Jtrw3mkRqer5+n0wn
- TLSH T19D63D51E76A9A4E3C6328A38A87542955322AC627FC017DB7FC473CD4D372D88D67B24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE