General
- Target 2026-08-11_9add8c605b3ae89adb9a7147ceade9c1_amadey_cobalt-strike_elex_wannacry
- Size 6.8MB
- Sample260811-2d8qssek3v
- SHA256 08e0ecdb94f467d746de785a2d7d91d81d5f61278672c05292158bcfd77f7734
- MD5 9add8c605b3ae89adb9a7147ceade9c1
- SHA1 1a286cab2a178d61b0b0588b95ad9954bff848e5
- SHA512 bc3790120b4825e5dbdfbaf256cffa4d006707eabd6bff26c329ba55807489b38055389c7aad6c29c44352631f6bdfd1b5240a08a2652191e00653bda4bb259b
- SSDEEP 49152:VrjLkLgVLKRWTQ6Zs5DhgPoXpvPji0AjxqJtb2IzLgVLKRWTQ6Zs5DhgPxPji0Aa:VrdKRuy5a2joFlKRuy5ahjoa
- TLSH T135767D12F6A44231E0B3A171C5E7A7AAED7635510B3089CB4384977D6F33AD19A3A337
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-11_9add8c605b3ae89adb9a7147ceade9c1_amadey_cobalt-strike_elex_wannacry.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_9add8c605b3ae89adb9a7147ceade9c1_amadey_cobalt-strike_elex_wannacry
- Size 6.8MB
- SHA256 08e0ecdb94f467d746de785a2d7d91d81d5f61278672c05292158bcfd77f7734
- MD5 9add8c605b3ae89adb9a7147ceade9c1
- SHA1 1a286cab2a178d61b0b0588b95ad9954bff848e5
- SHA512 bc3790120b4825e5dbdfbaf256cffa4d006707eabd6bff26c329ba55807489b38055389c7aad6c29c44352631f6bdfd1b5240a08a2652191e00653bda4bb259b
- SSDEEP 49152:VrjLkLgVLKRWTQ6Zs5DhgPoXpvPji0AjxqJtb2IzLgVLKRWTQ6Zs5DhgPxPji0Aa:VrdKRuy5a2joFlKRuy5ahjoa
- TLSH T135767D12F6A44231E0B3A171C5E7A7AAED7635510B3089CB4384977D6F33AD19A3A337
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Contacts a large (655) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1