General
- Target 2026-07-28_f8a77fa1a693fc53be4db846cf8d323d_elex_wannacry
- Size 90KB
- Sample260729-aceyjscm3t
- SHA256 7b5306f42b71bf405a3a66b58035a7e83812d835ed3186cdacd6e5c4052b4727
- MD5 f8a77fa1a693fc53be4db846cf8d323d
- SHA1 3760f57c7498e7a710b7b3552d03eaad76bcd8fd
- SHA512 f2ca60d412e3cd6354ca6e09275953c34d9515605764bae3c3eb8943b726f18b9d00cf9ed374fccc713a15c0a52087131f771eab32ae59e24f1a66e821ad7488
- SSDEEP 1536:W7ZppApUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFsAcEhT:6pWpUFpEhLfyBtPf50FWkFpPDze/qFs8
- TLSH T17793075E8EECF4D7E3E9213499277A9C9C1ABC09BDFAFC363A4544C91855EB2880414F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-28_f8a77fa1a693fc53be4db846cf8d323d_elex_wannacry.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_f8a77fa1a693fc53be4db846cf8d323d_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_f8a77fa1a693fc53be4db846cf8d323d_elex_wannacry
- Size 90KB
- SHA256 7b5306f42b71bf405a3a66b58035a7e83812d835ed3186cdacd6e5c4052b4727
- MD5 f8a77fa1a693fc53be4db846cf8d323d
- SHA1 3760f57c7498e7a710b7b3552d03eaad76bcd8fd
- SHA512 f2ca60d412e3cd6354ca6e09275953c34d9515605764bae3c3eb8943b726f18b9d00cf9ed374fccc713a15c0a52087131f771eab32ae59e24f1a66e821ad7488
- SSDEEP 1536:W7ZppApUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFsAcEhT:6pWpUFpEhLfyBtPf50FWkFpPDze/qFs8
- TLSH T17793075E8EECF4D7E3E9213499277A9C9C1ABC09BDFAFC363A4544C91855EB2880414F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Executes dropped EXE
-
Drops file in System32 directory