General
- Target 2026-11-03_c5ab2d79a5179f7c0f3066ab9684ffd8_elex_wannacry
- Size 91KB
- Sample261104-kc1kcsch57
- SHA256 783385a73027d9cc4a48fb8136987644bda885a3ae91e7a2868f464f0b77e931
- MD5 c5ab2d79a5179f7c0f3066ab9684ffd8
- SHA1 5a865d646f36bed5745aebee1395d6f1e84a9282
- SHA512 678ed15eeb079e8d901aef819d80243be7e53266cd3e30059cde4ff720f36e906593e772e2ce179ef4eb509574d58b513f94a6ae50402bfbaa29a5a3193bc32c
- SSDEEP 768:R7BlpppARFbh6qS+pim269O7X7vX9O7X7vAiuyIEd7gNC12azsIJ1huKHLe2s5/G:R7ZppAp6qFpaMIwYe8KHw8KHA
- TLSH T1C393A5C9796FF789E70A2030D91717BE0DB690676E208ADBB79DF4E85761AD0F01C026
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-03_c5ab2d79a5179f7c0f3066ab9684ffd8_elex_wannacry.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-03_c5ab2d79a5179f7c0f3066ab9684ffd8_elex_wannacry
- Size 91KB
- SHA256 783385a73027d9cc4a48fb8136987644bda885a3ae91e7a2868f464f0b77e931
- MD5 c5ab2d79a5179f7c0f3066ab9684ffd8
- SHA1 5a865d646f36bed5745aebee1395d6f1e84a9282
- SHA512 678ed15eeb079e8d901aef819d80243be7e53266cd3e30059cde4ff720f36e906593e772e2ce179ef4eb509574d58b513f94a6ae50402bfbaa29a5a3193bc32c
- SSDEEP 768:R7BlpppARFbh6qS+pim269O7X7vX9O7X7vAiuyIEd7gNC12azsIJ1huKHLe2s5/G:R7ZppAp6qFpaMIwYe8KHw8KHA
- TLSH T1C393A5C9796FF789E70A2030D91717BE0DB690676E208ADBB79DF4E85761AD0F01C026
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Detects executables packed with eXPressor