General
- Target 2026-08-16_d48efe01cc80aa846253420797f2da93_cobalt-strike_elex_upatre_wannacry
- Size 113KB
- Sample260816-p3hjpaytft
- SHA256 930e365cb77b9a608a11f136ef4b21c866c59014c1537f0cb914689cf6587bd9
- MD5 d48efe01cc80aa846253420797f2da93
- SHA1 e32d024c5a4093cef996c528130058ddebd03981
- SHA512 bd66da65aaeafe04a7e16e7bcb4554f67692fe99b783a934476a16ec4f5e38540bd4b1ba4744055e8931e0331b3472c3c3bde2551c8aba6d37a501a7c71da764
- SSDEEP 1536:FAA34WvLKb7TQdL31Aq+3Wd83R43e/7VOEjs2FRP2Eg:FANw3mk8meTI
- TLSH T185B3FE3D7AE865F3D3B7CAB9D9F556C2B931B8223E01594E148603480C23F56EDA1B2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_d48efe01cc80aa846253420797f2da93_cobalt-strike_elex_upatre_wannacry.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_d48efe01cc80aa846253420797f2da93_cobalt-strike_elex_upatre_wannacry.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_d48efe01cc80aa846253420797f2da93_cobalt-strike_elex_upatre_wannacry
- Size 113KB
- SHA256 930e365cb77b9a608a11f136ef4b21c866c59014c1537f0cb914689cf6587bd9
- MD5 d48efe01cc80aa846253420797f2da93
- SHA1 e32d024c5a4093cef996c528130058ddebd03981
- SHA512 bd66da65aaeafe04a7e16e7bcb4554f67692fe99b783a934476a16ec4f5e38540bd4b1ba4744055e8931e0331b3472c3c3bde2551c8aba6d37a501a7c71da764
- SSDEEP 1536:FAA34WvLKb7TQdL31Aq+3Wd83R43e/7VOEjs2FRP2Eg:FANw3mk8meTI
- TLSH T185B3FE3D7AE865F3D3B7CAB9D9F556C2B931B8223E01594E148603480C23F56EDA1B2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE