General
- Target 2026-06-02_c0aa5f55bea44e01bd2f561def57ad71_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 987KB
- Sample260602-ctl5asbx6v
- SHA256 910e4a259ea5aa9f5928fecaf49f27e6c5d3e384838ee0572e55c2a2ee7fcfac
- MD5 c0aa5f55bea44e01bd2f561def57ad71
- SHA1 319282ca5d69d69802722459efd40409ad33a0a3
- SHA512 6024a14c610b6f4f7d5dbefa622f3b7425f8b6ecdbd6fb634c971bdc066f23cdac5180e2ed7080bb3646716f60fe894aa5814e3b5f4f033777815b1a29639426
- SSDEEP 24576:1GRzatThRiVNbLGJv6plFh9iGa2oMYMgdsHGePZ:o8TjFJspDLoVMgdkLPZ
- TLSH T1EC25EF192B80CDA1F36FC07296D06E34B6772A203733CD4A6E4895391BF2E5FE792156
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-02_c0aa5f55bea44e01bd2f561def57ad71_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_c0aa5f55bea44e01bd2f561def57ad71_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-02_c0aa5f55bea44e01bd2f561def57ad71_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 987KB
- SHA256 910e4a259ea5aa9f5928fecaf49f27e6c5d3e384838ee0572e55c2a2ee7fcfac
- MD5 c0aa5f55bea44e01bd2f561def57ad71
- SHA1 319282ca5d69d69802722459efd40409ad33a0a3
- SHA512 6024a14c610b6f4f7d5dbefa622f3b7425f8b6ecdbd6fb634c971bdc066f23cdac5180e2ed7080bb3646716f60fe894aa5814e3b5f4f033777815b1a29639426
- SSDEEP 24576:1GRzatThRiVNbLGJv6plFh9iGa2oMYMgdsHGePZ:o8TjFJspDLoVMgdkLPZ
- TLSH T1EC25EF192B80CDA1F36FC07296D06E34B6772A203733CD4A6E4895391BF2E5FE792156
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Adds Run key to start application