General
- Target 2026-07-28_a252cb51de424fbe129eaf1271a1040f_coinminer_elex_wannacry
- Size 13.4MB
- Sample260728-2bdsmsxfna
- SHA256 e121ca396e899d4ff2a31347bdbd13a45351a80afb67970f9671cc131e8ebe55
- MD5 a252cb51de424fbe129eaf1271a1040f
- SHA1 29c31cb57f01050548ca3d17dea28d02972426e0
- SHA512 42293671a8ab1c0ee5b82b02c64e00bbecbeaa61a91f20b0aaee1ffd5969f1988f55763cbd413cb23f8ec72d89898321c8ec798c545df70893ae61afbfc6bbee
- SSDEEP 393216:pnBI1hNdbAY94f8kc4oC6yAgwqXe9+wVJE+:pUNdD94xc1cZXe9+wnd
- TLSH T14DE6332BD391235BC72EC23DC94E1E09EE146A347691DC2B6A70F14DDF896843E345AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-28_a252cb51de424fbe129eaf1271a1040f_coinminer_elex_wannacry.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_a252cb51de424fbe129eaf1271a1040f_coinminer_elex_wannacry
- Size 13.4MB
- SHA256 e121ca396e899d4ff2a31347bdbd13a45351a80afb67970f9671cc131e8ebe55
- MD5 a252cb51de424fbe129eaf1271a1040f
- SHA1 29c31cb57f01050548ca3d17dea28d02972426e0
- SHA512 42293671a8ab1c0ee5b82b02c64e00bbecbeaa61a91f20b0aaee1ffd5969f1988f55763cbd413cb23f8ec72d89898321c8ec798c545df70893ae61afbfc6bbee
- SSDEEP 393216:pnBI1hNdbAY94f8kc4oC6yAgwqXe9+wVJE+:pUNdD94xc1cZXe9+wnd
- TLSH T14DE6332BD391235BC72EC23DC94E1E09EE146A347691DC2B6A70F14DDF896843E345AB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
UPX dump on OEP (original entry point)