General
- Target 2026-10-08_3426b96810f3098c5a80838f6ef5b121_elex_wannacry
- Size 2.3MB
- Sample261009-v5a6aadb49
- SHA256 317304e41dfbd68506086afd87f2d6892597e97adf23cad3d41d46a6bfbc1572
- MD5 3426b96810f3098c5a80838f6ef5b121
- SHA1 ecc8f531513a026928bac410ebff039e9e5c6d9e
- SHA512 37755b337d9e2affd4d36f70d3fbe03a377c61d5044774f613f33623b4ccd4ee4f9a99b10c01b18d1cf06f96e6c919f914f21fd158b9e43670b5c6d54eb65bf8
- SSDEEP 24576:G99/ocGVqDdcMlF50EQ956Dhi+6XzRDQjGX3ISf+shC10MNBnOszLRhgO3rb:GHqVqBcMPdQCDYtRsiX3IkUkULRSOf
- TLSH T1E1B59D7A422BC946C52F4A7075F8F17905FAF66B83EC4C315A79B1DE828102B60CED97
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-08_3426b96810f3098c5a80838f6ef5b121_elex_wannacry.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-08_3426b96810f3098c5a80838f6ef5b121_elex_wannacry
- Size 2.3MB
- SHA256 317304e41dfbd68506086afd87f2d6892597e97adf23cad3d41d46a6bfbc1572
- MD5 3426b96810f3098c5a80838f6ef5b121
- SHA1 ecc8f531513a026928bac410ebff039e9e5c6d9e
- SHA512 37755b337d9e2affd4d36f70d3fbe03a377c61d5044774f613f33623b4ccd4ee4f9a99b10c01b18d1cf06f96e6c919f914f21fd158b9e43670b5c6d54eb65bf8
- SSDEEP 24576:G99/ocGVqDdcMlF50EQ956Dhi+6XzRDQjGX3ISf+shC10MNBnOszLRhgO3rb:GHqVqBcMPdQCDYtRsiX3IkUkULRSOf
- TLSH T1E1B59D7A422BC946C52F4A7075F8F17905FAF66B83EC4C315A79B1DE828102B60CED97
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Detects executables packed with eXPressor