General
- Target 2026-08-01_42d72a1f35575ab585384147a7e319ae_coinminer_elex_wannacry
- Size 5.9MB
- Sample260802-a9c58a1sat
- SHA256 011fbde2e8be40d0cc51aec9e70b860b46de551bf6a36886f3124b23181f38ed
- MD5 42d72a1f35575ab585384147a7e319ae
- SHA1 c6d2e2cf22ffd540b4e12d5d2df5446acfd5f513
- SHA512 942f122d87c03cf4d2192da47956374c1d9800f981361b750c9bf3e9bde660c34cd32aee8aacfbe4aea2f8085204e49e3c32fcb525e9f6c3853e60b35a02f748
- SSDEEP 98304:e0Ak+zsoWYUBbDPxlABfDYZ/oa5Mo0ZJBO+6nC33kvTn3UXW9Itjb8+6crA0BfIu:8zsJDPxWJYZQ3oIJ+CnkvT3hItsLcrAK
- TLSH T1FE563396FF02301AD61530BE44B34EBC6398755A65DFC4BAFCD0FBAE4A107298CAC549
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-01_42d72a1f35575ab585384147a7e319ae_coinminer_elex_wannacry.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_42d72a1f35575ab585384147a7e319ae_coinminer_elex_wannacry
- Size 5.9MB
- SHA256 011fbde2e8be40d0cc51aec9e70b860b46de551bf6a36886f3124b23181f38ed
- MD5 42d72a1f35575ab585384147a7e319ae
- SHA1 c6d2e2cf22ffd540b4e12d5d2df5446acfd5f513
- SHA512 942f122d87c03cf4d2192da47956374c1d9800f981361b750c9bf3e9bde660c34cd32aee8aacfbe4aea2f8085204e49e3c32fcb525e9f6c3853e60b35a02f748
- SSDEEP 98304:e0Ak+zsoWYUBbDPxlABfDYZ/oa5Mo0ZJBO+6nC33kvTn3UXW9Itjb8+6crA0BfIu:8zsJDPxWJYZQ3oIJ+CnkvT3hItsLcrAK
- TLSH T1FE563396FF02301AD61530BE44B34EBC6398755A65DFC4BAFCD0FBAE4A107298CAC549
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
UPX dump on OEP (original entry point)