General
- Target 2026-10-07_fd8f2680e5b9b8f65842ebcd9e573d99_elex_wannacry
- Size 124KB
- Sample261007-kazv2sf12k
- SHA256 7368036dc3a1660a68bd5f62fb180aa1e44c7b4aca3e97bbbbae88ff32168750
- MD5 fd8f2680e5b9b8f65842ebcd9e573d99
- SHA1 b4c8028f3ea9799fd25f51416464b8a0f13507f4
- SHA512 0c5c42e1707c380c609fc6372b807f5e2dc2452cd17b5f0a94187a59043f1397bf05c537c55ecf5fe48242cf8a4aefa8d9efb1a1c96130b3991c9a2a459f7c97
- SSDEEP 3072:70Wp6qcz5ZMfTiu66I3UwqSsMBlsWb4A+2:x+jMfTinqncsWp+2
- TLSH T198C3F6617CAEF6A0CF441339AD6B5E83C305398F3C5ACE4276A515E3913CD950CAB4E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-07_fd8f2680e5b9b8f65842ebcd9e573d99_elex_wannacry.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-07_fd8f2680e5b9b8f65842ebcd9e573d99_elex_wannacry
- Size 124KB
- SHA256 7368036dc3a1660a68bd5f62fb180aa1e44c7b4aca3e97bbbbae88ff32168750
- MD5 fd8f2680e5b9b8f65842ebcd9e573d99
- SHA1 b4c8028f3ea9799fd25f51416464b8a0f13507f4
- SHA512 0c5c42e1707c380c609fc6372b807f5e2dc2452cd17b5f0a94187a59043f1397bf05c537c55ecf5fe48242cf8a4aefa8d9efb1a1c96130b3991c9a2a459f7c97
- SSDEEP 3072:70Wp6qcz5ZMfTiu66I3UwqSsMBlsWb4A+2:x+jMfTinqncsWp+2
- TLSH T198C3F6617CAEF6A0CF441339AD6B5E83C305398F3C5ACE4276A515E3913CD950CAB4E6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Detects executables packed with eXPressor