General
- Target 2026-09-30_5c4665cd980cef0f519a30edcd7261cb_elex_wannacry
- Size 443KB
- Sample260930-m9arbadg36
- SHA256 3b983a029cf8552bb98b10e7637dba737fe05de30e5b0caf9b5910346faac5f5
- MD5 5c4665cd980cef0f519a30edcd7261cb
- SHA1 6e81ae418b8066804382e608f116ea1063e72659
- SHA512 b659a2f50f278ce9385f544209571d80cb37359a114f422cbb7e053a1a4d36b134d4e117f7034d79ca68a784b6090a201211a7d1a4fc99f29ecad505279f08dd
- SSDEEP 6144:0HL3rYMv0pilFvAfTtYHHu8C/TXmrILr9iMGsSaOyiZ:GDvvUcFvACw7XmrS9iMGsSaOyiZ
- TLSH T100A418C50053CBC2DE1E46799BE9BD5810F1966AACE9CFE04A4A6632C204F1F517ECDB
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-30_5c4665cd980cef0f519a30edcd7261cb_elex_wannacry.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_5c4665cd980cef0f519a30edcd7261cb_elex_wannacry
- Size 443KB
- SHA256 3b983a029cf8552bb98b10e7637dba737fe05de30e5b0caf9b5910346faac5f5
- MD5 5c4665cd980cef0f519a30edcd7261cb
- SHA1 6e81ae418b8066804382e608f116ea1063e72659
- SHA512 b659a2f50f278ce9385f544209571d80cb37359a114f422cbb7e053a1a4d36b134d4e117f7034d79ca68a784b6090a201211a7d1a4fc99f29ecad505279f08dd
- SSDEEP 6144:0HL3rYMv0pilFvAfTtYHHu8C/TXmrILr9iMGsSaOyiZ:GDvvUcFvACw7XmrS9iMGsSaOyiZ
- TLSH T100A418C50053CBC2DE1E46799BE9BD5810F1966AACE9CFE04A4A6632C204F1F517ECDB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Detects executables packed with eXPressor