General
- Target 2026-08-21_e659263b8107979de59aa7030bbf2d55_cobalt-strike_elex_upatre_wannacry
- Size 112KB
- Sample260821-hw7rnsab96
- SHA256 b6af490d25bc7f2830f7b23a554d70a8231af6112d5cffc748ae364ee01680fe
- MD5 e659263b8107979de59aa7030bbf2d55
- SHA1 3850aebe15c7642dd71290cd9e7845430b0d438f
- SHA512 47d5b9faa850bb73786bfbbd7c6c993db7f778f98eb236dc73a64d1241564c65670de0f7e723402c62b0a297c3decd4bd263e26f71f9af6ccc9cbf1c70c54c55
- SSDEEP 1536:FAA34WvLKb7TQdL31Aq+3Wd83R43e/7VOEjs2FRP2EW:FANw3mk8meTO
- TLSH T1DEB3FE3D7AE865F3D3B7CAB9D9F556C2B931B8223E01594E148603480C23F56EDA1B2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_e659263b8107979de59aa7030bbf2d55_cobalt-strike_elex_upatre_wannacry.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_e659263b8107979de59aa7030bbf2d55_cobalt-strike_elex_upatre_wannacry.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_e659263b8107979de59aa7030bbf2d55_cobalt-strike_elex_upatre_wannacry
- Size 112KB
- SHA256 b6af490d25bc7f2830f7b23a554d70a8231af6112d5cffc748ae364ee01680fe
- MD5 e659263b8107979de59aa7030bbf2d55
- SHA1 3850aebe15c7642dd71290cd9e7845430b0d438f
- SHA512 47d5b9faa850bb73786bfbbd7c6c993db7f778f98eb236dc73a64d1241564c65670de0f7e723402c62b0a297c3decd4bd263e26f71f9af6ccc9cbf1c70c54c55
- SSDEEP 1536:FAA34WvLKb7TQdL31Aq+3Wd83R43e/7VOEjs2FRP2EW:FANw3mk8meTO
- TLSH T1DEB3FE3D7AE865F3D3B7CAB9D9F556C2B931B8223E01594E148603480C23F56EDA1B2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE