General
- Target 2026-04-20_3a33da2dcd095fe302f90ea3c6f6517d_elex_wannacry
- Size 255KB
- Sample260420-nda8msgw5j
- SHA256 3184f77e1878848837fd37fbb090c83d09485d458522ae4f4d2a54a86ec90d81
- MD5 3a33da2dcd095fe302f90ea3c6f6517d
- SHA1 6973be8844997ff88214e6ede54fb447b9352312
- SHA512 70d97ae2b71f607ed72334caa09aa6c84d8f9dcc6228c7218acd0a7c27b9ac5248bb5640e47415f99a996df8ce57f2f8d603643b7ce79955e4d51d604d7cf3fe
- SSDEEP 1536:R7ZppAp6qFpf5Jmwd0V6nglJDZJD+Y/R56dnB/fl/T2+5VuCd9GpVGgEvKRzNC5g:7pWp6qFx/0ongPZ6fdTJVL3CEvKRzFd
- TLSH T16244E4B4891F7CC9D6E1C1F4859532FE9E5163333E35BAC9D0C6B66C332AA8449183B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-04-20_3a33da2dcd095fe302f90ea3c6f6517d_elex_wannacry.exe
Resource
win10v2004-20260130-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-20_3a33da2dcd095fe302f90ea3c6f6517d_elex_wannacry
- Size 255KB
- SHA256 3184f77e1878848837fd37fbb090c83d09485d458522ae4f4d2a54a86ec90d81
- MD5 3a33da2dcd095fe302f90ea3c6f6517d
- SHA1 6973be8844997ff88214e6ede54fb447b9352312
- SHA512 70d97ae2b71f607ed72334caa09aa6c84d8f9dcc6228c7218acd0a7c27b9ac5248bb5640e47415f99a996df8ce57f2f8d603643b7ce79955e4d51d604d7cf3fe
- SSDEEP 1536:R7ZppAp6qFpf5Jmwd0V6nglJDZJD+Y/R56dnB/fl/T2+5VuCd9GpVGgEvKRzNC5g:7pWp6qFx/0ongPZ6fdTJVL3CEvKRzFd
- TLSH T16244E4B4891F7CC9D6E1C1F4859532FE9E5163333E35BAC9D0C6B66C332AA8449183B6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Detects executables packed with eXPressor