General
- Target 2026-05-23_4a8c886587ae2a29580daa636cc5219c_coinminer_elex_wannacry
- Size 488KB
- Sample260523-csdfrsbs4j
- SHA256 2fa1481e298953430c6d05107d10e2985e997605b6ec4ae3d88064c14bc3f77c
- MD5 4a8c886587ae2a29580daa636cc5219c
- SHA1 fa45dc9b43e606dbe4e1fae7d78a38177285f49f
- SHA512 f4cab845e89bef1d98798b849f596dbfc869db1e67c60085c9780aa7f9bdffd2299ba18b4104397ab65d57f08a6afd5e24013bc68faa8bdb93b40073a1481ec6
- SSDEEP 6144:mAEY6cp61m4X8gtqCY1fffw/htW+au/1v3yaN9sOq:mAE5cKX1tenw/v93yOVq
- TLSH T1DBB49C18F248D4BCD2A341B51E9886B9673A7F63AF160A733E11B35CBE7554E3A4408F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-23_4a8c886587ae2a29580daa636cc5219c_coinminer_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-23_4a8c886587ae2a29580daa636cc5219c_coinminer_elex_wannacry.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-23_4a8c886587ae2a29580daa636cc5219c_coinminer_elex_wannacry
- Size 488KB
- SHA256 2fa1481e298953430c6d05107d10e2985e997605b6ec4ae3d88064c14bc3f77c
- MD5 4a8c886587ae2a29580daa636cc5219c
- SHA1 fa45dc9b43e606dbe4e1fae7d78a38177285f49f
- SHA512 f4cab845e89bef1d98798b849f596dbfc869db1e67c60085c9780aa7f9bdffd2299ba18b4104397ab65d57f08a6afd5e24013bc68faa8bdb93b40073a1481ec6
- SSDEEP 6144:mAEY6cp61m4X8gtqCY1fffw/htW+au/1v3yaN9sOq:mAE5cKX1tenw/v93yOVq
- TLSH T1DBB49C18F248D4BCD2A341B51E9886B9673A7F63AF160A733E11B35CBE7554E3A4408F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.