General
- Target 2026-09-07_08cb574beed0093a72e43622047f2d83_elex_wannacry
- Size 59KB
- Sample260909-jjwpbatfke
- SHA256 1236b8bd27acd6debad483bc94c169eed41b1525d130ef3df6bdef1e42e08973
- MD5 08cb574beed0093a72e43622047f2d83
- SHA1 e2a7831b8be787b5798393760ef106e4770eafdb
- SHA512 e7ed24c7b4e819448e6eab2d1d857539cc2233cab0b735609e6e1c7b3b9f02d220164288da0d073f52b014a5b0e36e2ceb2e0e8f718f78655c1077ed736a7ff7
- SSDEEP 768:p7BlphA7dASbSLJJBZBZaOAOIB3jM2jMO/7OSi4fZ9Z34fZ9Z9oh9DxxINiwrEfq:p7ZhA7dAxJJB7LD2I2IbS0SyUwrEfsL
- TLSH T13053F8EF0D01902CE93E6D74DD9B3CAB453AE10E70E07939E916BE2A206339497DD91C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-07_08cb574beed0093a72e43622047f2d83_elex_wannacry.exe
Resource
win11-20260513-en
12 signatures
300 seconds
Malware Config
Targets
-
- Target 2026-09-07_08cb574beed0093a72e43622047f2d83_elex_wannacry
- Size 59KB
- SHA256 1236b8bd27acd6debad483bc94c169eed41b1525d130ef3df6bdef1e42e08973
- MD5 08cb574beed0093a72e43622047f2d83
- SHA1 e2a7831b8be787b5798393760ef106e4770eafdb
- SHA512 e7ed24c7b4e819448e6eab2d1d857539cc2233cab0b735609e6e1c7b3b9f02d220164288da0d073f52b014a5b0e36e2ceb2e0e8f718f78655c1077ed736a7ff7
- SSDEEP 768:p7BlphA7dASbSLJJBZBZaOAOIB3jM2jMO/7OSi4fZ9Z34fZ9Z9oh9DxxINiwrEfq:p7ZhA7dAxJJB7LD2I2IbS0SyUwrEfsL
- TLSH T13053F8EF0D01902CE93E6D74DD9B3CAB453AE10E70E07939E916BE2A206339497DD91C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Renames multiple (652) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.