General
- Target 2026-08-14_c1295ba91df7e1fe5a99aa8936f25861_coinminer_elex_wannacry
- Size 815KB
- Sample260814-hhztxaxtax
- SHA256 0ca726b2128df3654086916193ebcb853078911377c2dc961463975408f94711
- MD5 c1295ba91df7e1fe5a99aa8936f25861
- SHA1 aa14e4fd70c5b5f290105439d84bc9858b286a32
- SHA512 0659e97298eefb1f680b5e920fdc5542b7965e201d6da4f7cf3ed30a70fe93ddd0702d6fea3abaf951fa9f6d5e5d78fc6950a4f8fb7f709a05ea3a0cdc4f3670
- SSDEEP 12288:1homHnW24yCwbjthMYC5IpL5LLUThVp48bTXiiPeunfLigRorkp/UZBM1rcjko0f:1vHnWGbjthMYsyA1/oLU2I26q+6++kuQ
- TLSH T16B058D585EF07587D3868271D1A7ACF1CE400D8E72C8DE641DEBB5AFE82BA0453AD463
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-14_c1295ba91df7e1fe5a99aa8936f25861_coinminer_elex_wannacry.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_c1295ba91df7e1fe5a99aa8936f25861_coinminer_elex_wannacry
- Size 815KB
- SHA256 0ca726b2128df3654086916193ebcb853078911377c2dc961463975408f94711
- MD5 c1295ba91df7e1fe5a99aa8936f25861
- SHA1 aa14e4fd70c5b5f290105439d84bc9858b286a32
- SHA512 0659e97298eefb1f680b5e920fdc5542b7965e201d6da4f7cf3ed30a70fe93ddd0702d6fea3abaf951fa9f6d5e5d78fc6950a4f8fb7f709a05ea3a0cdc4f3670
- SSDEEP 12288:1homHnW24yCwbjthMYC5IpL5LLUThVp48bTXiiPeunfLigRorkp/UZBM1rcjko0f:1vHnWGbjthMYsyA1/oLU2I26q+6++kuQ
- TLSH T16B058D585EF07587D3868271D1A7ACF1CE400D8E72C8DE641DEBB5AFE82BA0453AD463
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
UPX dump on OEP (original entry point)