General
- Target 2026-04-19_fd91e3f59d66c02e04ee3cca5a2e2ae3_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.0MB
- Sample260419-p96j4abs4k
- SHA256 9dd3954c60951040045b3dbb40090358e87aec563f7b272d2bb2e0b3517a933c
- MD5 fd91e3f59d66c02e04ee3cca5a2e2ae3
- SHA1 57ffc83ad7f4cdd113899ecefc4ed403d947717d
- SHA512 33e6a4e0a3455eea9b5d7f453890b4565deeea512ef669f33403018bf1e925e16bf111d1e3e40c6f345304627cc367ef929ab80ef7e26785273b135f64e2be3d
- SSDEEP 24576:RGRzatThRiVNbLGJv6plFh9iGa2oMYMgdsHGeX:88TjFJspDLoVMgdkLX
- TLSH T18235F1057790CD61F2AFC1724AE16F74B27379202733CE4A2B0451391FF2E5AEB92656
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-19_fd91e3f59d66c02e04ee3cca5a2e2ae3_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-19_fd91e3f59d66c02e04ee3cca5a2e2ae3_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-19_fd91e3f59d66c02e04ee3cca5a2e2ae3_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.0MB
- SHA256 9dd3954c60951040045b3dbb40090358e87aec563f7b272d2bb2e0b3517a933c
- MD5 fd91e3f59d66c02e04ee3cca5a2e2ae3
- SHA1 57ffc83ad7f4cdd113899ecefc4ed403d947717d
- SHA512 33e6a4e0a3455eea9b5d7f453890b4565deeea512ef669f33403018bf1e925e16bf111d1e3e40c6f345304627cc367ef929ab80ef7e26785273b135f64e2be3d
- SSDEEP 24576:RGRzatThRiVNbLGJv6plFh9iGa2oMYMgdsHGeX:88TjFJspDLoVMgdkLX
- TLSH T18235F1057790CD61F2AFC1724AE16F74B27379202733CE4A2B0451391FF2E5AEB92656
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application