General
- Target 2026-08-27_79c42244831cabdd3c233b2d1c6eb871_cobalt-strike_elex_upatre_wannacry
- Size 113KB
- Sample260827-rtqj2swekh
- SHA256 a556deb5b0ea0360b63ba6ec6bb6db09b6c4f6a5451cf35fe7fb9c5b6ffb9e4b
- MD5 79c42244831cabdd3c233b2d1c6eb871
- SHA1 93d0a67264f2ab5ef02d0d1e0f695e340fc95544
- SHA512 95fb4ed178b55910f6e38b7ddab170c52c4f6dbe2cdcbd223f76cc9e044019f0fa8f78db80073937a16dbca243d405606766535754be46343fba33d49f8dc95c
- SSDEEP 1536:FAA34WvLKb7TQdL31Aq+3Wd83R43e/7VOEjs2FRP2Eu:FANw3mk8meTm
- TLSH T13CB3FE3D7AE865F3D3B7CAB9D9F556C2B931B8223E01594E148603480C23F56EDA1B2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-27_79c42244831cabdd3c233b2d1c6eb871_cobalt-strike_elex_upatre_wannacry.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-27_79c42244831cabdd3c233b2d1c6eb871_cobalt-strike_elex_upatre_wannacry.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_79c42244831cabdd3c233b2d1c6eb871_cobalt-strike_elex_upatre_wannacry
- Size 113KB
- SHA256 a556deb5b0ea0360b63ba6ec6bb6db09b6c4f6a5451cf35fe7fb9c5b6ffb9e4b
- MD5 79c42244831cabdd3c233b2d1c6eb871
- SHA1 93d0a67264f2ab5ef02d0d1e0f695e340fc95544
- SHA512 95fb4ed178b55910f6e38b7ddab170c52c4f6dbe2cdcbd223f76cc9e044019f0fa8f78db80073937a16dbca243d405606766535754be46343fba33d49f8dc95c
- SSDEEP 1536:FAA34WvLKb7TQdL31Aq+3Wd83R43e/7VOEjs2FRP2Eu:FANw3mk8meTm
- TLSH T13CB3FE3D7AE865F3D3B7CAB9D9F556C2B931B8223E01594E148603480C23F56EDA1B2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE