General
- Target 2026-09-08_00f59706d045d425997c1aa75fe119a6_cobalt-strike_elex_upatre_wannacry
- Size 113KB
- Sample260908-y2ldmaxthv
- SHA256 675e1b6b9cead134544dee73cc8a13b5cb83cf0552d1379e4c20f6db7f9fe97f
- MD5 00f59706d045d425997c1aa75fe119a6
- SHA1 86e047d04f244884c9fc58bbcb0367b4d4cc2f8d
- SHA512 85d490a683af8478b191fdcc5d86a942308423d947fa5c32537b4bcc7203708ea2e777f30016d860025f5fbdc71223e51b4618f7972ccf536b37b712d0f31642
- SSDEEP 1536:FAA34WvLKb7TQdL31Aq+3Wd83R43e/7VOEjs2FRP2Eg:FANw3mk8meT4
- TLSH T11EB3FF3D7AE865F3D3B7CAB5D9F556C2B931B8223E01594E148603480C23F56EDA1B2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-08_00f59706d045d425997c1aa75fe119a6_cobalt-strike_elex_upatre_wannacry.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-08_00f59706d045d425997c1aa75fe119a6_cobalt-strike_elex_upatre_wannacry.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_00f59706d045d425997c1aa75fe119a6_cobalt-strike_elex_upatre_wannacry
- Size 113KB
- SHA256 675e1b6b9cead134544dee73cc8a13b5cb83cf0552d1379e4c20f6db7f9fe97f
- MD5 00f59706d045d425997c1aa75fe119a6
- SHA1 86e047d04f244884c9fc58bbcb0367b4d4cc2f8d
- SHA512 85d490a683af8478b191fdcc5d86a942308423d947fa5c32537b4bcc7203708ea2e777f30016d860025f5fbdc71223e51b4618f7972ccf536b37b712d0f31642
- SSDEEP 1536:FAA34WvLKb7TQdL31Aq+3Wd83R43e/7VOEjs2FRP2Eg:FANw3mk8meT4
- TLSH T11EB3FF3D7AE865F3D3B7CAB5D9F556C2B931B8223E01594E148603480C23F56EDA1B2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE