General
- Target 2026-05-16_2c42d997db697ef7dacb9d3109f374e0_coinminer_elex_wannacry
- Size 488KB
- Sample260516-bf48aahx4x
- SHA256 1707102496d9b00a8ba7652f5d1f42bac4b9955fe34a23c7560f141e7cac5ad6
- MD5 2c42d997db697ef7dacb9d3109f374e0
- SHA1 0711da6d6664ff1a8812ac5307eac94aae316909
- SHA512 b7db12f9a13b4dbf8a0246acc21365580570510f6177f0f918441e920816190af708abd1b240f0d97df198b1c8f40345b77c3d7cf880121609070b49bf90753b
- SSDEEP 6144:mAEYfXe9FhRUMi22zilHI6rMRSc1PguswQeW1hau/1v3yaN9sOq:mAEYfXezUJzilHFrMRSIg2Q5993yOVq
- TLSH T157B4AEE86931800DC99085F82F23B6F82E741D714C21993ABD78379D7B3DEB68B76425
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-16_2c42d997db697ef7dacb9d3109f374e0_coinminer_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-16_2c42d997db697ef7dacb9d3109f374e0_coinminer_elex_wannacry.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-16_2c42d997db697ef7dacb9d3109f374e0_coinminer_elex_wannacry
- Size 488KB
- SHA256 1707102496d9b00a8ba7652f5d1f42bac4b9955fe34a23c7560f141e7cac5ad6
- MD5 2c42d997db697ef7dacb9d3109f374e0
- SHA1 0711da6d6664ff1a8812ac5307eac94aae316909
- SHA512 b7db12f9a13b4dbf8a0246acc21365580570510f6177f0f918441e920816190af708abd1b240f0d97df198b1c8f40345b77c3d7cf880121609070b49bf90753b
- SSDEEP 6144:mAEYfXe9FhRUMi22zilHI6rMRSc1PguswQeW1hau/1v3yaN9sOq:mAEYfXezUJzilHFrMRSIg2Q5993yOVq
- TLSH T157B4AEE86931800DC99085F82F23B6F82E741D714C21993ABD78379D7B3DEB68B76425
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.