General
- Target 2026-10-29_245140873e2cd10c2513baf279d64a77_elex_wannacry
- Size 9.0MB
- Sample261029-tmwhtsbf46
- SHA256 eaed601b63d235731ae04fbf471b42c6fd23093f0563f2ab493eb30c21ffad11
- MD5 245140873e2cd10c2513baf279d64a77
- SHA1 3782eb541167d1a8bfb1c81df94e4b61131917eb
- SHA512 c608e95cde5514e4cb677025b2180032648405f383e26c0a57938c20ed308fc1b28368fed9f75391de193d46bc0167b64ba0d4d67280b2d9c4ea7fd3f30bb2eb
- SSDEEP 98304:twaCELMjOLIalJ67sj4jmpRMTcToaxLQsp1RXp9nGeyYnXrwFZN8MrPzofcRLyGl:twaCYLIal06MTo9RPGeyurwmaPnLT
- TLSH T17A969CE24AB97F90CE7A2CB50053F938F29C265E1E095C5C67A648FD2165FD321238ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-10-29_245140873e2cd10c2513baf279d64a77_elex_wannacry.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-29_245140873e2cd10c2513baf279d64a77_elex_wannacry
- Size 9.0MB
- SHA256 eaed601b63d235731ae04fbf471b42c6fd23093f0563f2ab493eb30c21ffad11
- MD5 245140873e2cd10c2513baf279d64a77
- SHA1 3782eb541167d1a8bfb1c81df94e4b61131917eb
- SHA512 c608e95cde5514e4cb677025b2180032648405f383e26c0a57938c20ed308fc1b28368fed9f75391de193d46bc0167b64ba0d4d67280b2d9c4ea7fd3f30bb2eb
- SSDEEP 98304:twaCELMjOLIalJ67sj4jmpRMTcToaxLQsp1RXp9nGeyYnXrwFZN8MrPzofcRLyGl:twaCYLIal06MTo9RPGeyurwmaPnLT
- TLSH T17A969CE24AB97F90CE7A2CB50053F938F29C265E1E095C5C67A648FD2165FD321238ED
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Detects executables packed with eXPressor