General
- Target 2026-04-22_b2c45c33cdb90bf1c0109e44ddba24ad_coinminer_darpapox_elex_jaku_nymaim_rhadamanthys_stop_wannacry
- Size 1.8MB
- Sample260422-ngc7eah15t
- SHA256 cfc80fc656387fc99d41a5825bb042f1a744c59dfe2193b312b127e8871f6279
- MD5 b2c45c33cdb90bf1c0109e44ddba24ad
- SHA1 d454b1271ba1b482bd3c18d8b8cd9b315e62fbae
- SHA512 e24903481be3436ddc5d63ea719944995c68c05c7f49743ddd867f91e9126f5cbe2df9c3ff3ab708b313f056bfdbeaad25d828f95485d2701013d8e25aceeefd
- SSDEEP 24576:XtocvXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaou:XScFbTChxKCnFnQXBbrtgb/iQvu0UHOB
- TLSH T1B295EF112390CC61F75FC07243E5AE79B67368213B33DC866E8865361BF2E9BE791246
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-22_b2c45c33cdb90bf1c0109e44ddba24ad_coinminer_darpapox_elex_jaku_nymaim_rhadamanthys_stop_wannacry.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-22_b2c45c33cdb90bf1c0109e44ddba24ad_coinminer_darpapox_elex_jaku_nymaim_rhadamanthys_stop_wannacry.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-22_b2c45c33cdb90bf1c0109e44ddba24ad_coinminer_darpapox_elex_jaku_nymaim_rhadamanthys_stop_wannacry
- Size 1.8MB
- SHA256 cfc80fc656387fc99d41a5825bb042f1a744c59dfe2193b312b127e8871f6279
- MD5 b2c45c33cdb90bf1c0109e44ddba24ad
- SHA1 d454b1271ba1b482bd3c18d8b8cd9b315e62fbae
- SHA512 e24903481be3436ddc5d63ea719944995c68c05c7f49743ddd867f91e9126f5cbe2df9c3ff3ab708b313f056bfdbeaad25d828f95485d2701013d8e25aceeefd
- SSDEEP 24576:XtocvXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaou:XScFbTChxKCnFnQXBbrtgb/iQvu0UHOB
- TLSH T1B295EF112390CC61F75FC07243E5AE79B67368213B33DC866E8865361BF2E9BE791246
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Adds Run key to start application
Drops file in System32 directory