General

  • Target
    2026-08-12_62aeccd92362c650aadcea0cb7cfeff3_cobalt-strike_elex_wannacry
  • Size 823KB
  • Sample260813-beh9eshj41
  • SHA256 f08f0ce8b5cdbc089e972119b5f62b208ac68c939e4a0cf2d3d85167a46c04e6
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-08-12_62aeccd92362c650aadcea0cb7cfeff3_cobalt-strike_elex_wannacry
    • Size 823KB
    • SHA256 f08f0ce8b5cdbc089e972119b5f62b208ac68c939e4a0cf2d3d85167a46c04e6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects executables packed with VMProtect.

    • Loads dropped DLL

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks