General
- Target 2026-08-14_3276ba90d504fd5619543624372b87ec_coinminer_elex_wannacry
- Size 179KB
- Sample260814-j4tepaycnf
- SHA256 286704516546ade759855d6801dfe3b508498f2d4dc4b7f948c7cf5378156396
- MD5 3276ba90d504fd5619543624372b87ec
- SHA1 ecc9c769daa3b90480e62fc6e4af61ea81ba59a4
- SHA512 0585d1da31e812cf86eca7e06f01961c1239ec1bf975f19e2644556691b7ce27aa76d562545ab5a3fd5e1e09dc20eca416acaad37ad2f88c067307b77a486e8b
- SSDEEP 1536:V7Zf/FAxTWoJJ7TFuz4UUuGRZdN9DsTkPFvzoa2wFkMnz0w3rvDReLytQz2veuDg:fny1JF7FN9rPFvzoCkgbw+tQCrRUVJj
- TLSH T1F404192999504D00E3E3467CAA5725A2966AFC93374FCEB1A2A07CD45DF49FCEE184C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-14_3276ba90d504fd5619543624372b87ec_coinminer_elex_wannacry.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_3276ba90d504fd5619543624372b87ec_coinminer_elex_wannacry
- Size 179KB
- SHA256 286704516546ade759855d6801dfe3b508498f2d4dc4b7f948c7cf5378156396
- MD5 3276ba90d504fd5619543624372b87ec
- SHA1 ecc9c769daa3b90480e62fc6e4af61ea81ba59a4
- SHA512 0585d1da31e812cf86eca7e06f01961c1239ec1bf975f19e2644556691b7ce27aa76d562545ab5a3fd5e1e09dc20eca416acaad37ad2f88c067307b77a486e8b
- SSDEEP 1536:V7Zf/FAxTWoJJ7TFuz4UUuGRZdN9DsTkPFvzoa2wFkMnz0w3rvDReLytQz2veuDg:fny1JF7FN9rPFvzoCkgbw+tQCrRUVJj
- TLSH T1F404192999504D00E3E3467CAA5725A2966AFC93374FCEB1A2A07CD45DF49FCEE184C3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
UPX dump on OEP (original entry point)