General
- Target 2026-08-22_98a218bc0427cf10f40894f41d19885f_elex_wannacry
- Size 59KB
- Sample260823-eyyd8ssfmd
- SHA256 e4efaeede3b1c33241ed14772d258c5cd586de2c15a6e1c9b94395f578019ef8
- MD5 98a218bc0427cf10f40894f41d19885f
- SHA1 a51b9431380970916a4a74661bdc27cb18ebcfc5
- SHA512 877fe85424ddfd2b76c8118671f063f0b02c4c060d74f89ae9f733c6dff9763595c3f1fcea16631228a315bbe7a5ada07e142b32ca5d55eee723f2295d5edb7b
- SSDEEP 768:W7BlphA7dASbSjJJ1EXBwzEXBwdcMcwBcCBcw/tio/tiFnJ2222222222222222+:W7ZhA7dABJJ7TTQoQy
- TLSH T1ED53D59E5F05C84BF34AB039BDA741E6D2B2C0D67F247DB5A6B14AD86E40FB6E10180D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-22_98a218bc0427cf10f40894f41d19885f_elex_wannacry.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_98a218bc0427cf10f40894f41d19885f_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_98a218bc0427cf10f40894f41d19885f_elex_wannacry
- Size 59KB
- SHA256 e4efaeede3b1c33241ed14772d258c5cd586de2c15a6e1c9b94395f578019ef8
- MD5 98a218bc0427cf10f40894f41d19885f
- SHA1 a51b9431380970916a4a74661bdc27cb18ebcfc5
- SHA512 877fe85424ddfd2b76c8118671f063f0b02c4c060d74f89ae9f733c6dff9763595c3f1fcea16631228a315bbe7a5ada07e142b32ca5d55eee723f2295d5edb7b
- SSDEEP 768:W7BlphA7dASbSjJJ1EXBwzEXBwdcMcwBcCBcw/tio/tiFnJ2222222222222222+:W7ZhA7dABJJ7TTQoQy
- TLSH T1ED53D59E5F05C84BF34AB039BDA741E6D2B2C0D67F247DB5A6B14AD86E40FB6E10180D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Renames multiple (5130) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.