Resubmissions

09/09/2026, 07:42

260909-jjwpbatfke10

09/09/2026, 07:39

260909-jg4bdatzbz10

General

  • Target
    2026-09-07_08cb574beed0093a72e43622047f2d83_elex_wannacry
  • Size 59KB
  • Sample260909-jjwpbatfke
  • SHA256 1236b8bd27acd6debad483bc94c169eed41b1525d130ef3df6bdef1e42e08973
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-09-07_08cb574beed0093a72e43622047f2d83_elex_wannacry
    • Size 59KB
    • SHA256 1236b8bd27acd6debad483bc94c169eed41b1525d130ef3df6bdef1e42e08973
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects Cosmu payload

      Cosmu is a worm written in C++.

    • Family: Cosmu

      Cosmu is a Windows worm written in C++.

    • Renames multiple (652) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

MITRE ATT&CK Enterprise v16

Tasks