General
- Target 2026-08-21_9d49c8db00b3a97e61826635c70602b4_cobalt-strike_elex_upatre_wannacry
- Size 113KB
- Sample260821-janbksvgrb
- SHA256 3b94c42a7173b667917747bb4dfd9e416179debb990c0b96780ae603c1cea718
- MD5 9d49c8db00b3a97e61826635c70602b4
- SHA1 2bb1621188e3ea8b4cb3d3f899a0a28721e7b9d6
- SHA512 157bbf1b5985a38e42a2ca8f917c4afcfe63c014b5d54d6eb90e51af3d6c616ef11efc4bcc2bd1eff93f6d89af8bf3582c1b0e3a32b5d2e90effda1a5ef2b57b
- SSDEEP 1536:FAA34WvLKb7TQdL31Aq+3Wd83R43e/7VOEjs2FRP2EK:FANw3mk8meTC
- TLSH T1F7B3FE3D7AE865F3D3B7CAB5D9F556C2B931B8223E01594E148603480C23F56EDA1B2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_9d49c8db00b3a97e61826635c70602b4_cobalt-strike_elex_upatre_wannacry.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_9d49c8db00b3a97e61826635c70602b4_cobalt-strike_elex_upatre_wannacry.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_9d49c8db00b3a97e61826635c70602b4_cobalt-strike_elex_upatre_wannacry
- Size 113KB
- SHA256 3b94c42a7173b667917747bb4dfd9e416179debb990c0b96780ae603c1cea718
- MD5 9d49c8db00b3a97e61826635c70602b4
- SHA1 2bb1621188e3ea8b4cb3d3f899a0a28721e7b9d6
- SHA512 157bbf1b5985a38e42a2ca8f917c4afcfe63c014b5d54d6eb90e51af3d6c616ef11efc4bcc2bd1eff93f6d89af8bf3582c1b0e3a32b5d2e90effda1a5ef2b57b
- SSDEEP 1536:FAA34WvLKb7TQdL31Aq+3Wd83R43e/7VOEjs2FRP2EK:FANw3mk8meTC
- TLSH T1F7B3FE3D7AE865F3D3B7CAB5D9F556C2B931B8223E01594E148603480C23F56EDA1B2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE