General
- Target 2026-04-15_1b065fa00ec12bb51a49692f088b303a_elex_wannacry
- Size 926KB
- Sample260415-syffbaet2x
- SHA256 f1af7cd44a422dbb535dad70a5fa3187c68da6491916df794d07b370f19a8a5e
- MD5 1b065fa00ec12bb51a49692f088b303a
- SHA1 b54109d56fbd9d8f841f15858ab40fc9be4b50b1
- SHA512 6a7d58dcdbff338018d0750d8ce983c37239437200fce0e8a781b0ddeadcbde3cba28b32bdab87bdb722e5d4fd664ca96fe9e85e0424cddab33e071191ce455f
- SSDEEP 6144:g1HvUfBvKhoTSpePbiKK3gIbsApSBAEFTOBYgNzs6yzlvxr1NDDj/zmf80B5tF:E+JSpePWKZInoJsVs6yzlvxr7mf8OF
- TLSH T15315B67C117BD7C7C844ABF1E4D1D8994A11BDA7C8A41D946BA8B361E3E232E744C2F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-04-15_1b065fa00ec12bb51a49692f088b303a_elex_wannacry.exe
Resource
win10v2004-20260130-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_1b065fa00ec12bb51a49692f088b303a_elex_wannacry
- Size 926KB
- SHA256 f1af7cd44a422dbb535dad70a5fa3187c68da6491916df794d07b370f19a8a5e
- MD5 1b065fa00ec12bb51a49692f088b303a
- SHA1 b54109d56fbd9d8f841f15858ab40fc9be4b50b1
- SHA512 6a7d58dcdbff338018d0750d8ce983c37239437200fce0e8a781b0ddeadcbde3cba28b32bdab87bdb722e5d4fd664ca96fe9e85e0424cddab33e071191ce455f
- SSDEEP 6144:g1HvUfBvKhoTSpePbiKK3gIbsApSBAEFTOBYgNzs6yzlvxr1NDDj/zmf80B5tF:E+JSpePWKZInoJsVs6yzlvxr7mf8OF
- TLSH T15315B67C117BD7C7C844ABF1E4D1D8994A11BDA7C8A41D946BA8B361E3E232E744C2F2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Detects executables packed with eXPressor