6824b1aef266f8d39057bc13a218980579c07afca9de79066a233ba4a3e29405

Analysis

max time kernel
149s
max time network
154s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
04/05/2026, 12:25

Target
2026-05-04_db3a3570552f757d65ece3d5bceb42c4_coinminer_elex_gh0st-rat_wannacry.exe
Size 255KB
Sample260504-pll6jsft4k
SHA256 6824b1aef266f8d39057bc13a218980579c07afca9de79066a233ba4a3e29405
MD5 db3a3570552f757d65ece3d5bceb42c4
SHA1 e3779b83b26896fa6b404a9ffe3117d0a553823b
SHA512 fb86585feb555caa304f85557f52f53da862078dbf39b72e402894c6fe7123897748132edd973fe5f31a6fa6c3173f6635071f93b94e3f3d68e65d55b6a73b2c
SSDEEP 6144:wsdXFryQfP7nn+b0AcnaZIrfdwX3MmIO:wsdXFfP7nn+br0fOnMmX
TLSH
T18844BE223AD5C8FAD2932271CB49B7EAE1F6DB180814493323142E5D7FBE946931D71E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5552	456	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\2026-05-04_db3a3570552f757d65ece3d5bceb42c4_coinminer_elex_gh0st-rat_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-04_db3a3570552f757d65ece3d5bceb42c4_coinminer_elex_gh0st-rat_wannacry.exe"
1⤵
PID:456
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 456 -s 164
  2⤵
  - Program crash
  PID:5552

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 456 -ip 456
1⤵
PID:5508