General
- Target 2026-09-08_5882a4e2d31c7fe4db3fcd5e94ea7425_coinminer_elex_wannacry
- Size 58KB
- Sample260908-vdw9faer6s
- SHA256 980e21a11e142f5797cba3c1c428b17a0c0fa96c754a556aca85dce5ff9acc65
- MD5 5882a4e2d31c7fe4db3fcd5e94ea7425
- SHA1 3714f8898ea8bc946c516a1193bb584d43494926
- SHA512 ac96507d9e4655d49bf2a86e02355eee0b864a50df3a15f0bb3aff4c35bbf7b9c1a24bc9e63fc4ab51050f8730db6bc3e2039156efc387b2d205b819ffe42860
- SSDEEP 768:a7BlpyqaFAK65euBT37CPKKDm7EJJ1EXBwzEXBwdcMcI9IEBwi1y3PY28:a7ZyqaFAxTWbJJ7TOEBwQeh8
- TLSH T1F1436C0EDF58DC07F4596079EC8B30B8863264EDBB5DCEB6B662F9CC9D94750E920026
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-08_5882a4e2d31c7fe4db3fcd5e94ea7425_coinminer_elex_wannacry.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_5882a4e2d31c7fe4db3fcd5e94ea7425_coinminer_elex_wannacry
- Size 58KB
- SHA256 980e21a11e142f5797cba3c1c428b17a0c0fa96c754a556aca85dce5ff9acc65
- MD5 5882a4e2d31c7fe4db3fcd5e94ea7425
- SHA1 3714f8898ea8bc946c516a1193bb584d43494926
- SHA512 ac96507d9e4655d49bf2a86e02355eee0b864a50df3a15f0bb3aff4c35bbf7b9c1a24bc9e63fc4ab51050f8730db6bc3e2039156efc387b2d205b819ffe42860
- SSDEEP 768:a7BlpyqaFAK65euBT37CPKKDm7EJJ1EXBwzEXBwdcMcI9IEBwi1y3PY28:a7ZyqaFAxTWbJJ7TOEBwQeh8
- TLSH T1F1436C0EDF58DC07F4596079EC8B30B8863264EDBB5DCEB6B662F9CC9D94750E920026
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
UPX dump on OEP (original entry point)