General
- Target 2026-08-01_602314906b44758c72c15190430cd26d_coinminer_elex_wannacry
- Size 1.8MB
- Sample260802-aym62szzcv
- SHA256 64ab9b73ea3007fbc15fa893b1a619483ca28dbe7dee1ae84c272fc27a4fbe67
- MD5 602314906b44758c72c15190430cd26d
- SHA1 c483a5bb755792fecf51c74c24bef18088efd636
- SHA512 e0092548f548c3f4845e6273dbcf8bed1409054e1849312cc625246dcbb7cdc15d736effa721c221e521f43ce55f46c79bba7ac644c66b623f51db019a34618b
- SSDEEP 24576:Njh6FuowuUcUzaOLwzeVFsqeFYWbQLrRLCxdeEH32JUk:Njh60uUcUczmJSX21
- TLSH T1E5859D14598778E0F7E2227E9A43F29B82A2FD653FC9CC30E6312DE45C62C785A545CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-01_602314906b44758c72c15190430cd26d_coinminer_elex_wannacry.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_602314906b44758c72c15190430cd26d_coinminer_elex_wannacry
- Size 1.8MB
- SHA256 64ab9b73ea3007fbc15fa893b1a619483ca28dbe7dee1ae84c272fc27a4fbe67
- MD5 602314906b44758c72c15190430cd26d
- SHA1 c483a5bb755792fecf51c74c24bef18088efd636
- SHA512 e0092548f548c3f4845e6273dbcf8bed1409054e1849312cc625246dcbb7cdc15d736effa721c221e521f43ce55f46c79bba7ac644c66b623f51db019a34618b
- SSDEEP 24576:Njh6FuowuUcUzaOLwzeVFsqeFYWbQLrRLCxdeEH32JUk:Njh60uUcUczmJSX21
- TLSH T1E5859D14598778E0F7E2227E9A43F29B82A2FD653FC9CC30E6312DE45C62C785A545CB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
UPX dump on OEP (original entry point)