General
- Target 2026-08-21_c192dce43873b16ef82abb9d47f28787_cobalt-strike_elex_upatre_wannacry
- Size 112KB
- Sample260822-hbgprawvez
- SHA256 13805aaf4360a1477f268c26ccf1295c0af63b7f5b580603b85b31ca40a5ede2
- MD5 c192dce43873b16ef82abb9d47f28787
- SHA1 735927894868330020fce44867c4174c48f7fc20
- SHA512 d88fb9d4d16b8d801574ef340f643faa0568da07f65bf9465017a002716631b0d09f16b62e3c732f1c55de30e0460f99e33102ae85b6af636d77b96ca964b9ce
- SSDEEP 1536:FAA34WvLKb7TQdL31Aq+3Wd83R43e/7VOEjs2FRP2E0:FANw3mk8meTM
- TLSH T1BFB3FE3D7AE865F3D3B7CAB5D9F556C2B931B8223E01594E148603480C23F56EDA1B2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_c192dce43873b16ef82abb9d47f28787_cobalt-strike_elex_upatre_wannacry.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_c192dce43873b16ef82abb9d47f28787_cobalt-strike_elex_upatre_wannacry.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_c192dce43873b16ef82abb9d47f28787_cobalt-strike_elex_upatre_wannacry
- Size 112KB
- SHA256 13805aaf4360a1477f268c26ccf1295c0af63b7f5b580603b85b31ca40a5ede2
- MD5 c192dce43873b16ef82abb9d47f28787
- SHA1 735927894868330020fce44867c4174c48f7fc20
- SHA512 d88fb9d4d16b8d801574ef340f643faa0568da07f65bf9465017a002716631b0d09f16b62e3c732f1c55de30e0460f99e33102ae85b6af636d77b96ca964b9ce
- SSDEEP 1536:FAA34WvLKb7TQdL31Aq+3Wd83R43e/7VOEjs2FRP2E0:FANw3mk8meTM
- TLSH T1BFB3FE3D7AE865F3D3B7CAB5D9F556C2B931B8223E01594E148603480C23F56EDA1B2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE