General
- Target 2026-05-10_1a3320f0e2d99b045dff96a980e71355_coinminer_elex_wannacry
- Size 488KB
- Sample260510-jp2graes2l
- SHA256 ab74b625741dce3b5a667245dbcfc3459f10d5857a900d43d8c4ac8c141d392d
- MD5 1a3320f0e2d99b045dff96a980e71355
- SHA1 0ec2a6cbb9d4fe2ba3cd466df92c72a19a97ed70
- SHA512 78521473dbd56539087a7aea3b3d7e4f477b07518172f682df0dc6d7901c70459abbe6619d6dd213e94f7e1d5d53f8a529be27e5d1726c644252c7d8b99be4f8
- SSDEEP 12288:mAER5FOz6fxr13FzDPLW3IiD7kyMzAT93yOVq:m/fx7ulUo3Vq
- TLSH T1E5B4BF31F718CB5ACED0867CA97466F4E9A0EC652C0B5DB9B01C739F25741B72B068E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-10_1a3320f0e2d99b045dff96a980e71355_coinminer_elex_wannacry.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-10_1a3320f0e2d99b045dff96a980e71355_coinminer_elex_wannacry.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-10_1a3320f0e2d99b045dff96a980e71355_coinminer_elex_wannacry
- Size 488KB
- SHA256 ab74b625741dce3b5a667245dbcfc3459f10d5857a900d43d8c4ac8c141d392d
- MD5 1a3320f0e2d99b045dff96a980e71355
- SHA1 0ec2a6cbb9d4fe2ba3cd466df92c72a19a97ed70
- SHA512 78521473dbd56539087a7aea3b3d7e4f477b07518172f682df0dc6d7901c70459abbe6619d6dd213e94f7e1d5d53f8a529be27e5d1726c644252c7d8b99be4f8
- SSDEEP 12288:mAER5FOz6fxr13FzDPLW3IiD7kyMzAT93yOVq:m/fx7ulUo3Vq
- TLSH T1E5B4BF31F718CB5ACED0867CA97466F4E9A0EC652C0B5DB9B01C739F25741B72B068E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.