Resubmissions

23/08/2026, 05:42

260823-gdz4faxzcs10

23/08/2026, 04:21

260823-eyyd8ssfmd10

General

  • Target
    2026-08-22_98a218bc0427cf10f40894f41d19885f_elex_wannacry
  • Size 59KB
  • Sample260823-eyyd8ssfmd
  • SHA256 e4efaeede3b1c33241ed14772d258c5cd586de2c15a6e1c9b94395f578019ef8
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-08-22_98a218bc0427cf10f40894f41d19885f_elex_wannacry
    • Size 59KB
    • SHA256 e4efaeede3b1c33241ed14772d258c5cd586de2c15a6e1c9b94395f578019ef8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects Cosmu payload

      Cosmu is a worm written in C++.

    • Family: Cosmu

      Cosmu is a Windows worm written in C++.

    • Renames multiple (5130) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

MITRE ATT&CK Enterprise v16

Tasks