1c10cc461f53a2b73a43c2d70f51a09d03b6a136c08d4a75edcbff7cd37b6056

Analysis

max time kernel
149s
max time network
128s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
04/05/2026, 10:16

Target
2026-05-04_07c42c6c3b8d622e5b05470f01611f67_coinminer_elex_gh0st-rat_wannacry.exe
Size 255KB
Sample260504-maxf2acs2r
SHA256 1c10cc461f53a2b73a43c2d70f51a09d03b6a136c08d4a75edcbff7cd37b6056
MD5 07c42c6c3b8d622e5b05470f01611f67
SHA1 2f3fe430f8c3a281d28b702adcfe95a17a18c581
SHA512 2c50f782291f174e7a6db7cd00152c2b6454f5fb480d5dabdf7d79ce0bac36e9350ae2a1243c85ae94725132f811b72dfa5575f9bac3b02ff14df289b024ab06
SSDEEP 6144:/sdXFryQfP7nn+b0A9naZIrfdwX3MmIO:/sdXFfP7nn+brjfOnMmX
TLSH
T1A544BE223AD5C8FAD2932271CB49B7EAE1F6DB180814493323542E5D7FBE846931D71E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3332	4320	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\2026-05-04_07c42c6c3b8d622e5b05470f01611f67_coinminer_elex_gh0st-rat_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-04_07c42c6c3b8d622e5b05470f01611f67_coinminer_elex_gh0st-rat_wannacry.exe"
1⤵
PID:4320
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4320 -s 200
  2⤵
  - Program crash
  PID:3332

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4320 -ip 4320
1⤵
PID:4568