General
- Target 2026-08-19_4a9861fc0593bb3c11804b90ca16a521_cobalt-strike_elex_strictor_vidar_wannacry
- Size 237KB
- Sample260819-ghv1aaxfnd
- SHA256 b3a597c32dab428adc004a1cbc3c155d63ea9736d85571266fab145bc28ba99f
- MD5 4a9861fc0593bb3c11804b90ca16a521
- SHA1 d0cc581e0e7ca18d9e9b224008d2a061f7b22625
- SHA512 950682c80e01d75cec1d361ff4894a2f7222b43e56e3246c0cce7a457701f5bf9df36520ec1c7d0d08705b3e241fa651023cdd6395e68eadb2def23ab2880560
- SSDEEP 6144:LiettLWavJGRzMVsqIp6BVWNpIRZBY32iett:3WCwRzMVVW6ZB
- TLSH T121347C03762490D5E155C134C613DB66E7B2F8A22D2583CF17908F5F2F336A2AD2E72A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_4a9861fc0593bb3c11804b90ca16a521_cobalt-strike_elex_strictor_vidar_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_4a9861fc0593bb3c11804b90ca16a521_cobalt-strike_elex_strictor_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_4a9861fc0593bb3c11804b90ca16a521_cobalt-strike_elex_strictor_vidar_wannacry
- Size 237KB
- SHA256 b3a597c32dab428adc004a1cbc3c155d63ea9736d85571266fab145bc28ba99f
- MD5 4a9861fc0593bb3c11804b90ca16a521
- SHA1 d0cc581e0e7ca18d9e9b224008d2a061f7b22625
- SHA512 950682c80e01d75cec1d361ff4894a2f7222b43e56e3246c0cce7a457701f5bf9df36520ec1c7d0d08705b3e241fa651023cdd6395e68eadb2def23ab2880560
- SSDEEP 6144:LiettLWavJGRzMVsqIp6BVWNpIRZBY32iett:3WCwRzMVVW6ZB
- TLSH T121347C03762490D5E155C134C613DB66E7B2F8A22D2583CF17908F5F2F336A2AD2E72A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.