Resubmissions

05/09/2026, 21:57

260905-1t5hmsan2y

05/09/2026, 21:40

260905-1jdbeaal7110

General

  • Target
    2026-09-03_c47311f27186c7f183134c025aa01ad6_elex_wannacry
  • Size 53KB
  • Sample260905-1jdbeaal71
  • SHA256 600fd231221a5e496bbb86cee2297fd021d94bede6efef445dda52c0c2e9bf9f
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-09-03_c47311f27186c7f183134c025aa01ad6_elex_wannacry
    • Size 53KB
    • SHA256 600fd231221a5e496bbb86cee2297fd021d94bede6efef445dda52c0c2e9bf9f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects Cosmu payload

      Cosmu is a worm written in C++.

    • Family: Cosmu

      Cosmu is a Windows worm written in C++.

    • Renames multiple (4960) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

MITRE ATT&CK Enterprise v16

Tasks