General
- Target 2026-08-26_f4231a4c258ef93b941591124316fa2f_coinminer_elex_wannacry
- Size 53KB
- Sample260827-cyc27ayfmg
- SHA256 8c52bf3d4d9023145e8c8af44976a4ee0ccf52fe6858eb972dbfba93441cce54
- MD5 f4231a4c258ef93b941591124316fa2f
- SHA1 349cb59ab45b662a77de7a77f0e52982f3b8e546
- SHA512 f855d9c2a28828756c506ac15f44ee4cb19873ba727099a6a526f40e8066747586fbdcdb22c6f386b259228526917e854dee609ef96ea40ffe2dde08fa066da2
- SSDEEP 768:a7BlpyqaFAK65euBT37CPKKDm7EJJ1EXBwzEXBwdcMcI9IEO:a7ZyqaFAxTWbJJ7TOEO
- TLSH T14D335B0EDE188D03F549643AEC5B30B58B76A4ED7B5DCDB6B362B9C88D94350EA20427
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-26_f4231a4c258ef93b941591124316fa2f_coinminer_elex_wannacry.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-26_f4231a4c258ef93b941591124316fa2f_coinminer_elex_wannacry
- Size 53KB
- SHA256 8c52bf3d4d9023145e8c8af44976a4ee0ccf52fe6858eb972dbfba93441cce54
- MD5 f4231a4c258ef93b941591124316fa2f
- SHA1 349cb59ab45b662a77de7a77f0e52982f3b8e546
- SHA512 f855d9c2a28828756c506ac15f44ee4cb19873ba727099a6a526f40e8066747586fbdcdb22c6f386b259228526917e854dee609ef96ea40ffe2dde08fa066da2
- SSDEEP 768:a7BlpyqaFAK65euBT37CPKKDm7EJJ1EXBwzEXBwdcMcI9IEO:a7ZyqaFAxTWbJJ7TOEO
- TLSH T14D335B0EDE188D03F549643AEC5B30B58B76A4ED7B5DCDB6B362B9C88D94350EA20427
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
UPX dump on OEP (original entry point)