5101625d2159cb17b88471766aaad4eb44d1ee826772db7ade89043f9840a41a

Analysis

max time kernel
149s
max time network
127s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
28/05/2026, 02:54

Target
2026-05-28_a8fb33f378770dbd99aa1d99aefa1c3a_coinminer_elex_gh0st-rat_wannacry.exe
Size 255KB
Sample260528-dedp2ses7q
SHA256 5101625d2159cb17b88471766aaad4eb44d1ee826772db7ade89043f9840a41a
MD5 a8fb33f378770dbd99aa1d99aefa1c3a
SHA1 66182edd3d0818d95fd38aba8a2dd51496cae844
SHA512 7ad76fb0f10ce25ddef2b0e2dfd8442ee2a749d05bd724a8c99d2d7728bd2d54bdc290bb484c6cc4547847ed2907a4d232dbd968caf1b4aa68b827db7a8a095b
SSDEEP 6144:IsdXFryQfP7nn+b0AjnaZIrfdwX3MmIO:IsdXFfP7nn+brJfOnMmX
TLSH
T1D944BE223AD5C8FAD2932271CA49B7EAE1F6DB180815493323142E5D7FBE846931D71E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4176	2580	WerFault.exe	80

C:\Users\Admin\AppData\Local\Temp\2026-05-28_a8fb33f378770dbd99aa1d99aefa1c3a_coinminer_elex_gh0st-rat_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-28_a8fb33f378770dbd99aa1d99aefa1c3a_coinminer_elex_gh0st-rat_wannacry.exe"
1⤵
PID:2580
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2580 -s 164
  2⤵
  - Program crash
  PID:4176

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 2580 -ip 2580
1⤵
PID:4880