General
- Target 2026-07-28_e097eb4b3308b9463c58022f10be17a9_coinminer_elex_wannacry
- Size 13.4MB
- Sample260728-1tsh3sam5v
- SHA256 03a63238643c7e7370fef799b627fef5fba992e2a751553f6aae4dd5e3d05920
- MD5 e097eb4b3308b9463c58022f10be17a9
- SHA1 57c10bb99c94ab34e9743ae0d8f04d13544dc77d
- SHA512 ce7dbe854f2528431687fab9a8dfd663a1d5425506e4df7bf2d3d9710f6b1b28b03e62d5871a8b4b6b8d885acbb7fd20d91868b36a0c94923a6de5258d6c7411
- SSDEEP 393216:xnBI1hNdbAY94f8kc4oC6yAgwqXe9+wVJER:xUNdD94xc1cZXe9+wnS
- TLSH T1BAE6332B9395271BC72EC23EC94F1E0DEE1415247E91DC2B7A70F14A9F896843E345AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-28_e097eb4b3308b9463c58022f10be17a9_coinminer_elex_wannacry.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_e097eb4b3308b9463c58022f10be17a9_coinminer_elex_wannacry
- Size 13.4MB
- SHA256 03a63238643c7e7370fef799b627fef5fba992e2a751553f6aae4dd5e3d05920
- MD5 e097eb4b3308b9463c58022f10be17a9
- SHA1 57c10bb99c94ab34e9743ae0d8f04d13544dc77d
- SHA512 ce7dbe854f2528431687fab9a8dfd663a1d5425506e4df7bf2d3d9710f6b1b28b03e62d5871a8b4b6b8d885acbb7fd20d91868b36a0c94923a6de5258d6c7411
- SSDEEP 393216:xnBI1hNdbAY94f8kc4oC6yAgwqXe9+wVJER:xUNdD94xc1cZXe9+wnS
- TLSH T1BAE6332B9395271BC72EC23EC94F1E0DEE1415247E91DC2B7A70F14A9F896843E345AB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
UPX dump on OEP (original entry point)