General
- Target 2026-10-29_eae9448c347cf82046f297b8fb4fb9f5_elex_wannacry
- Size 511KB
- Sample261029-h2wxcsae75
- SHA256 32ef15cbdd9ce270b73a85f2f1360fb8af56907b5c30b0094641776a32089b4b
- MD5 eae9448c347cf82046f297b8fb4fb9f5
- SHA1 3dda3cb22e0863fb95111608e84ccdf8b15a9410
- SHA512 05d75968a43b49c8b7123ebc36d18409f3c881aac5cfb7cf6680fa5f03623c47f2880996544575873b6817545e98dbabb3a8ff304b5d6256836fda280f11f0d3
- SSDEEP 12288:G8/GK5wevQDoiIYtlMMcBxRkKMMfunbsW8+:GFZNDLIYtlwRkRMfSgWh
- TLSH T160B48E186A9BBB90CF8C873454538F4E07E6246B3D61CD9FA76DF4660B27F67044E8A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-29_eae9448c347cf82046f297b8fb4fb9f5_elex_wannacry.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-29_eae9448c347cf82046f297b8fb4fb9f5_elex_wannacry
- Size 511KB
- SHA256 32ef15cbdd9ce270b73a85f2f1360fb8af56907b5c30b0094641776a32089b4b
- MD5 eae9448c347cf82046f297b8fb4fb9f5
- SHA1 3dda3cb22e0863fb95111608e84ccdf8b15a9410
- SHA512 05d75968a43b49c8b7123ebc36d18409f3c881aac5cfb7cf6680fa5f03623c47f2880996544575873b6817545e98dbabb3a8ff304b5d6256836fda280f11f0d3
- SSDEEP 12288:G8/GK5wevQDoiIYtlMMcBxRkKMMfunbsW8+:GFZNDLIYtlwRkRMfSgWh
- TLSH T160B48E186A9BBB90CF8C873454538F4E07E6246B3D61CD9FA76DF4660B27F67044E8A0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Detects executables packed with eXPressor