General
- Target 2026-08-05_6634227d760fe159115023d75f60430f_coinminer_elex_wannacry
- Size 13.4MB
- Sample260805-ce42kabh59
- SHA256 908cc4afc38426a9e1f6f713dd422db35bd78d2dad384514d0e60b729e8cd321
- MD5 6634227d760fe159115023d75f60430f
- SHA1 ea6e3b3eb4dc7042ef8dcdea959219a6e441cacd
- SHA512 538ef582939bb67bb0680f7c02d5e80833536bca15367234354534f77173ae99a5832c2bb5085260b366739b3c3101b9dbf5bc136742769d5922dcd0efbf1eba
- SSDEEP 196608:/XbGHylSzHfWnAG8ogGsLkQ+ZREdl8OP6QQrsT40cFgrYwrTqqK30pY1zu2:/SHNHOnV8Sz8WOSQQ44dPL02
- TLSH T181E6330BC878B29DED51177AD627BEA1A09B04397121C919C582F72FD87F04FEA007B9
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-05_6634227d760fe159115023d75f60430f_coinminer_elex_wannacry.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_6634227d760fe159115023d75f60430f_coinminer_elex_wannacry
- Size 13.4MB
- SHA256 908cc4afc38426a9e1f6f713dd422db35bd78d2dad384514d0e60b729e8cd321
- MD5 6634227d760fe159115023d75f60430f
- SHA1 ea6e3b3eb4dc7042ef8dcdea959219a6e441cacd
- SHA512 538ef582939bb67bb0680f7c02d5e80833536bca15367234354534f77173ae99a5832c2bb5085260b366739b3c3101b9dbf5bc136742769d5922dcd0efbf1eba
- SSDEEP 196608:/XbGHylSzHfWnAG8ogGsLkQ+ZREdl8OP6QQrsT40cFgrYwrTqqK30pY1zu2:/SHNHOnV8Sz8WOSQQ44dPL02
- TLSH T181E6330BC878B29DED51177AD627BEA1A09B04397121C919C582F72FD87F04FEA007B9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
UPX dump on OEP (original entry point)