General
- Target 2026-09-01_54f002a67790485901861257a3267ce4_elex_wannacry
- Size 497KB
- Sample260903-n4ry3swdnb
- SHA256 68eaa6016da88f74d94a1a8017ced781276223cba5e03eda1ebfcc5569ba56be
- MD5 54f002a67790485901861257a3267ce4
- SHA1 0e9e544f8a74bd668fec08018058c3c40ce60424
- SHA512 3a026c37027c21d977250269c74658a94660d97679e838f6ad94b2b1653f91f1949b83561ffec7ed0ad8a7f26c8bd9645ea2621c5bb28750cf70f9148486f1b9
- SSDEEP 6144:0HxJM0CFTP/f/Jyebx06fiyueP6fMNTwuAh5LjRbXg0tpAyDoxm:GPBMvbdqeAsTwuAh5LjJXJ5
- TLSH T1AAB43AF0A903AC53E5BDAB314E69D0198D037ED23B44EC6CC863B8B764B76F9982C551
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-01_54f002a67790485901861257a3267ce4_elex_wannacry.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-01_54f002a67790485901861257a3267ce4_elex_wannacry
- Size 497KB
- SHA256 68eaa6016da88f74d94a1a8017ced781276223cba5e03eda1ebfcc5569ba56be
- MD5 54f002a67790485901861257a3267ce4
- SHA1 0e9e544f8a74bd668fec08018058c3c40ce60424
- SHA512 3a026c37027c21d977250269c74658a94660d97679e838f6ad94b2b1653f91f1949b83561ffec7ed0ad8a7f26c8bd9645ea2621c5bb28750cf70f9148486f1b9
- SSDEEP 6144:0HxJM0CFTP/f/Jyebx06fiyueP6fMNTwuAh5LjRbXg0tpAyDoxm:GPBMvbdqeAsTwuAh5LjJXJ5
- TLSH T1AAB43AF0A903AC53E5BDAB314E69D0198D037ED23B44EC6CC863B8B764B76F9982C551
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Detects executables packed with eXPressor