General
- Target 2026-04-23_49d587d88f7e5c9a52ce264e2fd9d722_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.7MB
- Sample260423-mb2gdabs3j
- SHA256 b1bede4040211fe7112e6cbc876abad96f3e9e5c37a35d648d6e0ac9562ee651
- MD5 49d587d88f7e5c9a52ce264e2fd9d722
- SHA1 46962ac01b4abaa41bd8d8ce2c2ef4db1bcf9eb4
- SHA512 eb3db0e36228afbd13d92d3e7d7e4e37007b7c583f7ec8f9c9cbe8deb4787043a7af6b81d8a722d61ab673d1fdcbbafa0e70e5a37d8383a0143fb3ee82af3cf9
- SSDEEP 24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UNO:mbTChxKCnFnQXBbrtgb/iQvu0UHOR
- TLSH T18D85DE252790CD61F36FC07683E16E79B5B329213B33D885AE4855312BF2E2FE781196
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-23_49d587d88f7e5c9a52ce264e2fd9d722_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-23_49d587d88f7e5c9a52ce264e2fd9d722_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-23_49d587d88f7e5c9a52ce264e2fd9d722_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.7MB
- SHA256 b1bede4040211fe7112e6cbc876abad96f3e9e5c37a35d648d6e0ac9562ee651
- MD5 49d587d88f7e5c9a52ce264e2fd9d722
- SHA1 46962ac01b4abaa41bd8d8ce2c2ef4db1bcf9eb4
- SHA512 eb3db0e36228afbd13d92d3e7d7e4e37007b7c583f7ec8f9c9cbe8deb4787043a7af6b81d8a722d61ab673d1fdcbbafa0e70e5a37d8383a0143fb3ee82af3cf9
- SSDEEP 24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UNO:mbTChxKCnFnQXBbrtgb/iQvu0UHOR
- TLSH T18D85DE252790CD61F36FC07683E16E79B5B329213B33D885AE4855312BF2E2FE781196
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Adds Run key to start application
Drops file in System32 directory