General

  • Target
    2026-08-10_020b63f4efed8947f212bd572d68e61b_elex_wannacry
  • Size 1.6MB
  • Sample260810-22laea1bqg
  • SHA256 f55518bdd89775e34c540d700314d67ba25b42e4742028d3e1f724b3f8de4a7f
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-08-10_020b63f4efed8947f212bd572d68e61b_elex_wannacry
    • Size 1.6MB
    • SHA256 f55518bdd89775e34c540d700314d67ba25b42e4742028d3e1f724b3f8de4a7f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects Cosmu payload

      Cosmu is a worm written in C++.

    • Family: Cosmu

      Cosmu is a Windows worm written in C++.

    • Renames multiple (1585) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

MITRE ATT&CK Enterprise v16

Tasks