General
- Target 2026-10-24_5d4cd8af5b072106ed6de7cc402522be_elex_wannacry
- Size 6.8MB
- Sample261025-y4vebaswfw
- SHA256 a3f08fef38d302ac0899873c480ff8d910fef6d13e61476aa613b9e1b55d251c
- MD5 5d4cd8af5b072106ed6de7cc402522be
- SHA1 81261a05434e12609ddfb2a2afc53cbc6dda329d
- SHA512 7d2fc6db53b3b1802d359385f7d2680fe90b1423ca58cb3f9d0c83707b60632124a850be3b30f9b3c48213adefcda1ae405aa0def9049588926ae64a13abca7c
- SSDEEP 98304:t5AEoRWtW0gQJmYQ08+BWo2QY3PjlvIwX:tno4M0rosVBWorYLpbX
- TLSH T188668EFC9F178F98822DE5A144998D4CD9539EEA7C90EEC1CCE230F21936395B57C81A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-24_5d4cd8af5b072106ed6de7cc402522be_elex_wannacry.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-24_5d4cd8af5b072106ed6de7cc402522be_elex_wannacry
- Size 6.8MB
- SHA256 a3f08fef38d302ac0899873c480ff8d910fef6d13e61476aa613b9e1b55d251c
- MD5 5d4cd8af5b072106ed6de7cc402522be
- SHA1 81261a05434e12609ddfb2a2afc53cbc6dda329d
- SHA512 7d2fc6db53b3b1802d359385f7d2680fe90b1423ca58cb3f9d0c83707b60632124a850be3b30f9b3c48213adefcda1ae405aa0def9049588926ae64a13abca7c
- SSDEEP 98304:t5AEoRWtW0gQJmYQ08+BWo2QY3PjlvIwX:tno4M0rosVBWorYLpbX
- TLSH T188668EFC9F178F98822DE5A144998D4CD9539EEA7C90EEC1CCE230F21936395B57C81A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Detects executables packed with eXPressor