General
- Target 2026-07-28_84920be2a721df42adbe27e26f5def34_coinminer_elex_wannacry
- Size 418KB
- Sample260728-w7sc1sshjf
- SHA256 4690ba8e19a8e433281fd9094b017505d8a5a2c30e1615a0c3c5d11fc5d91bee
- MD5 84920be2a721df42adbe27e26f5def34
- SHA1 5d9ac680d20d1df40c54dd09f310d723f124b106
- SHA512 bf67ac6d98d1c6184ec9d00c93cff930017adcaabfdbb880d71dd0096cf3e197836048244d34469f5f733fc8efbc4cb548d547cbe145a6c56536a6247d7fbf10
- SSDEEP 12288:HR/q672qD2PQ/p8FPCP1EEwsFAmgRcKBDXOHZd6E04VRBYRF9d5:o6CqDBiPCPSTsFAmgRcKBDXOHZd6E04E
- TLSH T18F943AB58E18E04FF27267B3940EB5D38321261E9AEFD7F51C64C548AB739B221A3035
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-28_84920be2a721df42adbe27e26f5def34_coinminer_elex_wannacry.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_84920be2a721df42adbe27e26f5def34_coinminer_elex_wannacry
- Size 418KB
- SHA256 4690ba8e19a8e433281fd9094b017505d8a5a2c30e1615a0c3c5d11fc5d91bee
- MD5 84920be2a721df42adbe27e26f5def34
- SHA1 5d9ac680d20d1df40c54dd09f310d723f124b106
- SHA512 bf67ac6d98d1c6184ec9d00c93cff930017adcaabfdbb880d71dd0096cf3e197836048244d34469f5f733fc8efbc4cb548d547cbe145a6c56536a6247d7fbf10
- SSDEEP 12288:HR/q672qD2PQ/p8FPCP1EEwsFAmgRcKBDXOHZd6E04VRBYRF9d5:o6CqDBiPCPSTsFAmgRcKBDXOHZd6E04E
- TLSH T18F943AB58E18E04FF27267B3940EB5D38321261E9AEFD7F51C64C548AB739B221A3035
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
UPX dump on OEP (original entry point)