General
- Target 2026-04-17_36fd5c69fdb27080948bfb79e1a0c510_coinminer_elex_wannacry
- Size 488KB
- Sample260417-d2fg6ahs7z
- SHA256 c9d06c077130bd3231f6dfe3617c8312b8aae2ecda06247bc7fab6d65e9e3085
- MD5 36fd5c69fdb27080948bfb79e1a0c510
- SHA1 71b1cda3ca909b2be5fb667cad246c3098587e9d
- SHA512 2cdb3ececebb3db9d1d39c0139e09443f10f00877e812206407c037dcc530027f1f70dcf122278a3dcde10865434ba48381efabb842b77b3dcb433db4f56d6d2
- SSDEEP 6144:mAESEXMEEVSmvfFMlo+o3miZEWvH4Iau/1v3yaN9sOq:mAE70VnvX+wm4F93yOVq
- TLSH T17DB4BD5930C2887ECAEB22B04DB5B5A522736C63DEE6CC1A231D7F5D0D34EE26B40765
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-17_36fd5c69fdb27080948bfb79e1a0c510_coinminer_elex_wannacry.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-17_36fd5c69fdb27080948bfb79e1a0c510_coinminer_elex_wannacry.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-17_36fd5c69fdb27080948bfb79e1a0c510_coinminer_elex_wannacry
- Size 488KB
- SHA256 c9d06c077130bd3231f6dfe3617c8312b8aae2ecda06247bc7fab6d65e9e3085
- MD5 36fd5c69fdb27080948bfb79e1a0c510
- SHA1 71b1cda3ca909b2be5fb667cad246c3098587e9d
- SHA512 2cdb3ececebb3db9d1d39c0139e09443f10f00877e812206407c037dcc530027f1f70dcf122278a3dcde10865434ba48381efabb842b77b3dcb433db4f56d6d2
- SSDEEP 6144:mAESEXMEEVSmvfFMlo+o3miZEWvH4Iau/1v3yaN9sOq:mAE70VnvX+wm4F93yOVq
- TLSH T17DB4BD5930C2887ECAEB22B04DB5B5A522736C63DEE6CC1A231D7F5D0D34EE26B40765
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.