General
- Target 2026-08-25_64a9ec8036b3a04a24b2b3ba8f767716_coinminer_elex_wannacry
- Size 1.8MB
- Sample260826-275agavya1
- SHA256 53ade0035470fec2d7d3bacbba9f2f9028a9e0893be2403a4bd81e5609d21c74
- MD5 64a9ec8036b3a04a24b2b3ba8f767716
- SHA1 dbcc75949c33b6f5195f6d484a7b24b69d5d4644
- SHA512 e384465aaed431302dc426950282036f65571e990cf1fc7acf872f3883e21a0a6afe24d95083eda79282f504c08a5f4f98ed791dd4e69cfcb7c4cebb41587ce3
- SSDEEP 24576:y2EuaFxaUu5K23U3+1s6DugBmC8Ghs4T9tm1kUAWtzls9Xkk7dZDXf4M/vOxMQXy:OFxa/U3bGhjT9thnkxOXkk77rGix9L
- TLSH T143858DEC910AE879C5ADF17111F2BC0D8F603A83AFE340559FB5B17DC8717A12A1E686
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-25_64a9ec8036b3a04a24b2b3ba8f767716_coinminer_elex_wannacry.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_64a9ec8036b3a04a24b2b3ba8f767716_coinminer_elex_wannacry
- Size 1.8MB
- SHA256 53ade0035470fec2d7d3bacbba9f2f9028a9e0893be2403a4bd81e5609d21c74
- MD5 64a9ec8036b3a04a24b2b3ba8f767716
- SHA1 dbcc75949c33b6f5195f6d484a7b24b69d5d4644
- SHA512 e384465aaed431302dc426950282036f65571e990cf1fc7acf872f3883e21a0a6afe24d95083eda79282f504c08a5f4f98ed791dd4e69cfcb7c4cebb41587ce3
- SSDEEP 24576:y2EuaFxaUu5K23U3+1s6DugBmC8Ghs4T9tm1kUAWtzls9Xkk7dZDXf4M/vOxMQXy:OFxa/U3bGhjT9thnkxOXkk77rGix9L
- TLSH T143858DEC910AE879C5ADF17111F2BC0D8F603A83AFE340559FB5B17DC8717A12A1E686
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
UPX dump on OEP (original entry point)