General
- Target 2026-08-04_19969717ab162c0f3b731ac08cff0b0a_coinminer_elex_wannacry
- Size 4.8MB
- Sample260804-j25pyavcmc
- SHA256 3f9d6ae41d3958b06f592e37dc8f41fd0e8b49a4462b9d672df5526e4cb7efcd
- MD5 19969717ab162c0f3b731ac08cff0b0a
- SHA1 53ac0dd9653dff46265db97819c3533c5b537175
- SHA512 faae7d0a0e26aea1fbd17aadd23c7e3076a6fac2f69bd0ce6565e71b540c04b19e8a4ff03608caaaf78dfb164207cdf721c849b199118a7c1735d50374e68f8d
- SSDEEP 98304:GOUi3ztX6iwkdAwaR86uB6VqgX9XNcajQ0DRF9:GQ3zlwkGHR86c6f9CQBDt
- TLSH T1FD363362CF087A61EB54E8BA545A9A8DFE20CE2424CF7DB16CDC71294552EFFD00076E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-04_19969717ab162c0f3b731ac08cff0b0a_coinminer_elex_wannacry.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_19969717ab162c0f3b731ac08cff0b0a_coinminer_elex_wannacry
- Size 4.8MB
- SHA256 3f9d6ae41d3958b06f592e37dc8f41fd0e8b49a4462b9d672df5526e4cb7efcd
- MD5 19969717ab162c0f3b731ac08cff0b0a
- SHA1 53ac0dd9653dff46265db97819c3533c5b537175
- SHA512 faae7d0a0e26aea1fbd17aadd23c7e3076a6fac2f69bd0ce6565e71b540c04b19e8a4ff03608caaaf78dfb164207cdf721c849b199118a7c1735d50374e68f8d
- SSDEEP 98304:GOUi3ztX6iwkdAwaR86uB6VqgX9XNcajQ0DRF9:GQ3zlwkGHR86c6f9CQBDt
- TLSH T1FD363362CF087A61EB54E8BA545A9A8DFE20CE2424CF7DB16CDC71294552EFFD00076E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
UPX dump on OEP (original entry point)