General
- Target 2026-08-05_fffb4011d9d33d5b8348708e9c01e2a3_coinminer_elex_wannacry
- Size 1.7MB
- Sample260805-3nt6tsycmh
- SHA256 7244be92574b5d519f16a5de092fe7c14d5b5d15aac68825ba52bb716c8d13aa
- MD5 fffb4011d9d33d5b8348708e9c01e2a3
- SHA1 635daaa97fcf4365d386c7178993569143cd905a
- SHA512 a460e39be3ecdcde4aa6dc316ccf4bb8430013e258b6a39d0f5f26695ba125a922c67fc2107af3d66d3f314307ba6d6c18c26a5dd4498007281f011fc3f53e7f
- SSDEEP 24576:VIH7Tx1bU6gso+9Cuk8jBWLsVWidh1s6DugBmCE/LLo+Kh0Em4uXeV:VETx1Bg69CBAVc/LYuM
- TLSH T1FA859EADD244F83AD6AEE17041E2BC4D8F143D83EBF340A55FB9B1A448717B4790E686
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-05_fffb4011d9d33d5b8348708e9c01e2a3_coinminer_elex_wannacry.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_fffb4011d9d33d5b8348708e9c01e2a3_coinminer_elex_wannacry
- Size 1.7MB
- SHA256 7244be92574b5d519f16a5de092fe7c14d5b5d15aac68825ba52bb716c8d13aa
- MD5 fffb4011d9d33d5b8348708e9c01e2a3
- SHA1 635daaa97fcf4365d386c7178993569143cd905a
- SHA512 a460e39be3ecdcde4aa6dc316ccf4bb8430013e258b6a39d0f5f26695ba125a922c67fc2107af3d66d3f314307ba6d6c18c26a5dd4498007281f011fc3f53e7f
- SSDEEP 24576:VIH7Tx1bU6gso+9Cuk8jBWLsVWidh1s6DugBmCE/LLo+Kh0Em4uXeV:VETx1Bg69CBAVc/LYuM
- TLSH T1FA859EADD244F83AD6AEE17041E2BC4D8F143D83EBF340A55FB9B1A448717B4790E686
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
UPX dump on OEP (original entry point)