General
- Target 2026-05-22_3e45aca1556feb15b1d1c0c00160cd1c_coinminer_darpapox_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.9MB
- Sample260522-se4c2aez3l
- SHA256 9ae2f59e68477eb455a4d229535a02c9394cea2d276e6ab0908928d4056b3afb
- MD5 3e45aca1556feb15b1d1c0c00160cd1c
- SHA1 aaf98c981ae7371465e4dc294dc01c3f46f26e5b
- SHA512 a20dcc601f84c967b0417fc58b6a8ac6ce0cf2c330bd419e89719ff5b491fe354d6d7f643a794d586d2c947eaa852f689264526b0e26d1372b9203f24e70e681
- SSDEEP 49152:/wiTRhbTChxKCnFnQXBbrtgb/iQvu0UHOav:/Rh6hxvWbrtUTrUHOO
- TLSH T1979501203740CD61F6AFC07296E4AF79753776312732D8C3AB8816391AB0ADBD7B5186
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-22_3e45aca1556feb15b1d1c0c00160cd1c_coinminer_darpapox_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-22_3e45aca1556feb15b1d1c0c00160cd1c_coinminer_darpapox_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-22_3e45aca1556feb15b1d1c0c00160cd1c_coinminer_darpapox_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.9MB
- SHA256 9ae2f59e68477eb455a4d229535a02c9394cea2d276e6ab0908928d4056b3afb
- MD5 3e45aca1556feb15b1d1c0c00160cd1c
- SHA1 aaf98c981ae7371465e4dc294dc01c3f46f26e5b
- SHA512 a20dcc601f84c967b0417fc58b6a8ac6ce0cf2c330bd419e89719ff5b491fe354d6d7f643a794d586d2c947eaa852f689264526b0e26d1372b9203f24e70e681
- SSDEEP 49152:/wiTRhbTChxKCnFnQXBbrtgb/iQvu0UHOav:/Rh6hxvWbrtUTrUHOO
- TLSH T1979501203740CD61F6AFC07296E4AF79753776312732D8C3AB8816391AB0ADBD7B5186
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Adds Run key to start application
Drops file in System32 directory