General
- Target 2026-08-26_eeea156578ec47838cf895d486075ef5_cobalt-strike_elex_upatre_wannacry
- Size 113KB
- Sample260827-d71qaaxvdt
- SHA256 59b2d36f7182768ac414bff6b61c47bff439d7c50fdec494b2de579d0af45dba
- MD5 eeea156578ec47838cf895d486075ef5
- SHA1 08911cfaab77afbff0a36708e9fc177bbfb9f1e4
- SHA512 30297bf2120ff9cf78ccf61c701ef665b4546c29fa0cc959f0960112f9dfcd2292739156471ccd2321b4e6a0a952891df5606f2e101b2dced686e7c0ec9c0be9
- SSDEEP 1536:FAA34WvLKb7TQdL31Aq+3Wd83R43e/7VOEjs2FRP2EK:FANw3mk8meTy
- TLSH T137B3FE3D7AE865F3D3B7CAB9D9F556C2B931B8223E01594E148603480C23F56EDA1B2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-26_eeea156578ec47838cf895d486075ef5_cobalt-strike_elex_upatre_wannacry.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-26_eeea156578ec47838cf895d486075ef5_cobalt-strike_elex_upatre_wannacry.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-26_eeea156578ec47838cf895d486075ef5_cobalt-strike_elex_upatre_wannacry
- Size 113KB
- SHA256 59b2d36f7182768ac414bff6b61c47bff439d7c50fdec494b2de579d0af45dba
- MD5 eeea156578ec47838cf895d486075ef5
- SHA1 08911cfaab77afbff0a36708e9fc177bbfb9f1e4
- SHA512 30297bf2120ff9cf78ccf61c701ef665b4546c29fa0cc959f0960112f9dfcd2292739156471ccd2321b4e6a0a952891df5606f2e101b2dced686e7c0ec9c0be9
- SSDEEP 1536:FAA34WvLKb7TQdL31Aq+3Wd83R43e/7VOEjs2FRP2EK:FANw3mk8meTy
- TLSH T137B3FE3D7AE865F3D3B7CAB9D9F556C2B931B8223E01594E148603480C23F56EDA1B2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE