General
- Target 2026-08-10_020b63f4efed8947f212bd572d68e61b_elex_wannacry
- Size 1.6MB
- Sample260810-22laea1bqg
- SHA256 f55518bdd89775e34c540d700314d67ba25b42e4742028d3e1f724b3f8de4a7f
- MD5 020b63f4efed8947f212bd572d68e61b
- SHA1 9c3dd83c2c6c78da21dfd709102276af33342e3b
- SHA512 b2837e948e8168205a4ece68f71dc3af228fcb6d0ac76fa7545f624a7ead75e0337ac8c4ce0843ab14ab8992810bc98e5c4a7650a6ef45bb48ef412160e68795
- SSDEEP 49152:iFsju/+DWXFKr7AwAghLFoGnXMEmZ+wBND2xQ6hx:iFf/ieQhjhpoGXhwzD2xQs
- TLSH T1FD752336899DA9EBE37621701E13F4AC89513D4ABFD1B4BDF85740AA1903FB1198218F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-10_020b63f4efed8947f212bd572d68e61b_elex_wannacry.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_020b63f4efed8947f212bd572d68e61b_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_020b63f4efed8947f212bd572d68e61b_elex_wannacry
- Size 1.6MB
- SHA256 f55518bdd89775e34c540d700314d67ba25b42e4742028d3e1f724b3f8de4a7f
- MD5 020b63f4efed8947f212bd572d68e61b
- SHA1 9c3dd83c2c6c78da21dfd709102276af33342e3b
- SHA512 b2837e948e8168205a4ece68f71dc3af228fcb6d0ac76fa7545f624a7ead75e0337ac8c4ce0843ab14ab8992810bc98e5c4a7650a6ef45bb48ef412160e68795
- SSDEEP 49152:iFsju/+DWXFKr7AwAghLFoGnXMEmZ+wBND2xQ6hx:iFf/ieQhjhpoGXhwzD2xQs
- TLSH T1FD752336899DA9EBE37621701E13F4AC89513D4ABFD1B4BDF85740AA1903FB1198218F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Renames multiple (1585) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.