2026-08-09_7b402cdb1b66e89daa60fd1f505a904a_cobalt-strike_elex_njrat_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-09_7b402cdb1b66e89daa60fd1f505a904a_cobalt-strike_elex_njrat_wannacry
Size 812KB
Sample260809-m7475sdr31
SHA256 25a734cd8eda0ed092114b65c54b19412408a142fb598157773c3907cad3be61
MD5 7b402cdb1b66e89daa60fd1f505a904a
SHA1 8ec8b78d0e0e7487bb70bac63009e2737741aee2
SHA512 e754494a1236232fafafbcc946577664850b9ac85feefaaa81299c84cb6730db4c122bb317426dea553a6eac3b201ec40a8b8e68deb9c9406f2656be927f685a
SSDEEP 6144:UJozC8XxzviAOkqI8ipZLu+c/eGn3TLS2bUR8EzWFPlpXSEuTtRj8gh2:UiCG6eqQHcWX2gqFPlpXSVZNPh2
TLSH
T1FE053A07FBE5ADE1EC73463C09B24A14673AFCB50A62C71B2258635D9E337808D65F62
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-09_7b402cdb1b66e89daa60fd1f505a904a_cobalt-strike_elex_njrat_wannacry

File Explorer

2026-08-09_7b402cdb1b66e89daa60fd1f505a904a_cobalt-strike_elex_njrat_wannacry

.exe 812KB

2026-08-09_7b402cdb1b66e89daa60fd1f505a904a_cobalt-strike_elex_njrat_wannacry

IMPHASH 8b54115f825a72e9112744f3aada2778
SHA256 25a734cd8eda0ed092114b65c54b19412408a142fb598157773c3907cad3be61
MD5 7b402cdb1b66e89daa60fd1f505a904a
SHA1 8ec8b78d0e0e7487bb70bac63009e2737741aee2
SHA512 e754494a1236232fafafbcc946577664850b9ac85feefaaa81299c84cb6730db4c122bb317426dea553a6eac3b201ec40a8b8e68deb9c9406f2656be927f685a
SSDEEP 6144:UJozC8XxzviAOkqI8ipZLu+c/eGn3TLS2bUR8EzWFPlpXSEuTtRj8gh2:UiCG6eqQHcWX2gqFPlpXSVZNPh2
TLSH
T1FE053A07FBE5ADE1EC73463C09B24A14673AFCB50A62C71B2258635D9E337808D65F62
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5008

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleFileNameA lstrlenA LoadLibraryA GetProcAddress CreateMutexA GetLastError ExitProcess WaitForSingleObject CloseHandle CreateThread GetCurrentProcessId GetTickCount Sleep GetModuleHandleA GetStartupInfoA

advapi32

RegQueryValueExA OpenSCManagerA CreateServiceA LockServiceDatabase ChangeServiceConfig2A UnlockServiceDatabase OpenServiceA StartServiceA RegSetValueExA CloseServiceHandle StartServiceCtrlDispatcherA SetServiceStatus RegOpenKeyExA RegOpenKeyA RegCloseKey

ws2_32

gethostbyname select __WSAFDIsSet recv WSAIoctl socket connect send gethostname inet_addr WSAStartup WSASocketA WSAGetLastError setsockopt htons htonl sendto closesocket WSACleanup inet_ntoa

iphlpapi

GetIfTable

msvcrt

fprintf _controlfp __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln _XcptFilter _exit strncmp exit time localtime strstr ??2@YAPAXI@Z _local_unwind2 _onexit sprintf rand printf putchar _except_handler3 _iob __dllonexit

Name

.text

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

PAGE

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

wZBJDUqy

Size

4KB

Virtual Size

3KB

Characteristics

Name

cybYLaPQ

Size

12KB

Virtual Size

8KB

Characteristics

Name

lrowILqU

Size

4KB

Virtual Size

2KB

Characteristics

Name

crtdhkvz

Size

12KB

Virtual Size

8KB

Characteristics

Name

Mymsneob

Size

16KB

Virtual Size

13KB

Characteristics

Name

NehuUFMm

Size

4KB

Virtual Size

1KB

Characteristics

Name

UXjQPncH

Size

8KB

Virtual Size

7KB

Characteristics

Name

BbVzaFNN

Size

4KB

Virtual Size

393B

Characteristics

Name

rblfHmYx

Size

4KB

Virtual Size

347B

Characteristics

Name

JDUMSUCx

Size

4KB

Virtual Size

3KB

Characteristics

Name

JLHPnQIA

Size

4KB

Virtual Size

16B

Characteristics

Name

WZmbThPo

Size

12KB

Virtual Size

10KB

Characteristics

Name

NiJtmSME

Size

8KB

Virtual Size

5KB

Characteristics

Name

xzGoQZZm

Size

12KB

Virtual Size

10KB

Characteristics

Name

aKBWHIEQ

Size

4KB

Virtual Size

2KB

Characteristics

Name

lfDEbprH

Size

4KB

Virtual Size

2KB

Characteristics

Name

UDRtFUKU

Size

4KB

Virtual Size

1KB

Characteristics

Name

xLMPZNdF

Size

4KB

Virtual Size

1KB

Characteristics

Name

JgIDmhYE

Size

48KB

Virtual Size

47KB

Characteristics

Name

mywxQsoD

Size

4KB

Virtual Size

58B

Characteristics

Name

frxjFKCu

Size

4KB

Virtual Size

3KB

Characteristics

Name

UShfRkCd

Size

20KB

Virtual Size

18KB

Characteristics

Name

tDVALcWI

Size

4KB

Virtual Size

768B

Characteristics

Name

ZImfYvGV

Size

4KB

Virtual Size

3KB

Characteristics

Name

srFfwWrr

Size

84KB

Virtual Size

82KB

Characteristics

Name

gmbVUdYa

Size

8KB

Virtual Size

4KB

Characteristics

Name

SHZbIRws

Size

12KB

Virtual Size

8KB

Characteristics

Name

VADljHBX

Size

4KB

Virtual Size

821B

Characteristics

Name

UeGsPHvF

Size

4KB

Virtual Size

1KB

Characteristics

Name

iHYGVwvM

Size

4KB

Virtual Size

2KB

Characteristics

Name

TWXTXneL

Size

4KB

Virtual Size

742B

Characteristics

Name

UnvgMGkR

Size

4KB

Virtual Size

3KB

Characteristics

Name

WUHheQJn

Size

8KB

Virtual Size

5KB

Characteristics

Name

ldMFpfZN

Size

4KB

Virtual Size

3KB

Characteristics

Name

VPtelDtm

Size

8KB

Virtual Size

4KB

Characteristics

Name

qOZnLskI

Size

4KB

Virtual Size

27B

Characteristics

Name

VibKVfAA

Size

4KB

Virtual Size

1KB

Characteristics

Name

eIGaQoOz

Size

12KB

Virtual Size

11KB

Characteristics

Name

VKkAsVFf

Size

4KB

Virtual Size

3KB

Characteristics

Name

DLyXBKGL

Size

4KB

Virtual Size

1KB

Characteristics

Name

rpeogeYN

Size

8KB

Virtual Size

7KB

Characteristics

Name

ugANNDLN

Size

16KB

Virtual Size

13KB

Characteristics

Name

einliSVG

Size

24KB

Virtual Size

22KB

Characteristics

Name

thGTRRVj

Size

16KB

Virtual Size

15KB

Characteristics

Name

JPdNkalo

Size

8KB

Virtual Size

5KB

Characteristics

Name

EmAfGJzo

Size

4KB

Virtual Size

990B

Characteristics

Name

kbVyDVQB

Size

4KB

Virtual Size

937B

Characteristics

Name

PAZAZtxO

Size

12KB

Virtual Size

10KB

Characteristics

Name

ZLepGOts

Size

8KB

Virtual Size

6KB

Characteristics

Name

ZhBZGWGt

Size

4KB

Virtual Size

277B

Characteristics

Name

YwromFRW

Size

4KB

Virtual Size

1KB

Characteristics

Name

TcNLoRLI

Size

8KB

Virtual Size

5KB

Characteristics

Name

QfCnUbMg

Size

64KB

Virtual Size

62KB

Characteristics

Name

NpzHQQXu

Size

28KB

Virtual Size

24KB

Characteristics

Name

oUCaZOaN

Size

8KB

Virtual Size

7KB

Characteristics

Name

aTrREvJS

Size

4KB

Virtual Size

2KB

Characteristics

Name

lSjhCLuY

Size

8KB

Virtual Size

4KB

Characteristics

Name

tuKAXNNZ

Size

4KB

Virtual Size

1KB

Characteristics

Name

qMxaFqjL

Size

4KB

Virtual Size

2KB

Characteristics

Name

MMgLHPKZ

Size

8KB

Virtual Size

7KB

Characteristics

Name

DiNccjuO

Size

4KB

Virtual Size

1KB

Characteristics

Name

DmTxwBzC

Size

16KB

Virtual Size

13KB

Characteristics

Name

ajEsxXbb

Size

4KB

Virtual Size

2KB

Characteristics

Name

gZbnJHTp

Size

8KB

Virtual Size

5KB

Characteristics

Name

RKKpveJa

Size

4KB

Virtual Size

3KB

Characteristics

Name

FkoeCLJP

Size

32KB

Virtual Size

28KB

Characteristics

Name

EeKguUpj

Size

4KB

Virtual Size

490B

Characteristics

Name

NkhMWJCq

Size

8KB

Virtual Size

4KB

Characteristics

Name

tvpJMDhk

Size

8KB

Virtual Size

5KB

Characteristics

Name

kUBBhtcY

Size

4KB

Virtual Size

2KB

Characteristics

Name

ESxiMTXX

Size

8KB

Virtual Size

7KB

Characteristics

Name

wfUDWWKw

Size

8KB

Virtual Size

7KB

Characteristics

Name

yPYtbwFG

Size

24KB

Virtual Size

21KB

Characteristics

Name

KltaDDWe

Size

16KB

Virtual Size

15KB

Characteristics

Name

FFtLmoYq

Size

4KB

Virtual Size

1KB

Characteristics

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-09_7b402cdb1b66e89daa60fd1f505a904a_cobalt-strike_elex_njrat_wannacry

kernel32

advapi32

ws2_32

iphlpapi

msvcrt

generic