General
- Target 2026-10-15_0e68f20ff2f383003aae60fadbbffd4e_elex_wannacry
- Size 72KB
- Sample261016-29e4csx18k
- SHA256 d2c34489a964e78d8eb7fc23701070f91618a6b61473ea13232cd7db969d47cd
- MD5 0e68f20ff2f383003aae60fadbbffd4e
- SHA1 c5c36b3b3295970a81b08d37b9ca45e8a190f2c3
- SHA512 69a7c2a3861f8472c677325357a79a364fbc2420b4e400e63a6eef9c6bad90aeb6393b8c5652d1189535cef0315ff72ae7ceb3b7daa631d7a110bbcaeb6cbfb4
- SSDEEP 1536:R7ZppAp6qFpf5Jmwd0V6nglJDZJD+YSS3VGgEvKRzNC5WeG:7pWp6qFx/0ongPbEvKRzFd
- TLSH T1F5739E4E598BD003E1B8213169A761BDE5E610347FAFED4AFB42FA3954A43D1D82C0D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-15_0e68f20ff2f383003aae60fadbbffd4e_elex_wannacry.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-15_0e68f20ff2f383003aae60fadbbffd4e_elex_wannacry
- Size 72KB
- SHA256 d2c34489a964e78d8eb7fc23701070f91618a6b61473ea13232cd7db969d47cd
- MD5 0e68f20ff2f383003aae60fadbbffd4e
- SHA1 c5c36b3b3295970a81b08d37b9ca45e8a190f2c3
- SHA512 69a7c2a3861f8472c677325357a79a364fbc2420b4e400e63a6eef9c6bad90aeb6393b8c5652d1189535cef0315ff72ae7ceb3b7daa631d7a110bbcaeb6cbfb4
- SSDEEP 1536:R7ZppAp6qFpf5Jmwd0V6nglJDZJD+YSS3VGgEvKRzNC5WeG:7pWp6qFx/0ongPbEvKRzFd
- TLSH T1F5739E4E598BD003E1B8213169A761BDE5E610347FAFED4AFB42FA3954A43D1D82C0D7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Detects executables packed with eXPressor