0ab99c0e888fad31e55fa6278727ff2afd1aab5a54003ed35faa4065cd28933c

Analysis

max time kernel
149s
max time network
96s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
02/06/2026, 03:10

Target
2026-06-02_af1c28011406a5fb012168b6999ff0f4_coinminer_elex_gh0st-rat_wannacry.exe
Size 255KB
Sample260602-dpckqsdy9l
SHA256 0ab99c0e888fad31e55fa6278727ff2afd1aab5a54003ed35faa4065cd28933c
MD5 af1c28011406a5fb012168b6999ff0f4
SHA1 1f9f0b40c97197dd3ce0189e3090cd91534af243
SHA512 814a80616ee4d7f4f1f7e8e2281566785b3fc6748b30ae1adb3a9d9926a06a181dd258db4f849cce519567c7f81a28df4d7ba92bf34091aff3b7efe4578cb20a
SSDEEP 6144:JsdXFryQfP7nn+b0AjnaZIrfdwX3MmIO:JsdXFfP7nn+brJfOnMmX
TLSH
T1FF44BE223AD5C8FAD2932271CA49B7EAE1F6DB180815493323142E5D7FBE846931D71E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
912	4900	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\2026-06-02_af1c28011406a5fb012168b6999ff0f4_coinminer_elex_gh0st-rat_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-02_af1c28011406a5fb012168b6999ff0f4_coinminer_elex_gh0st-rat_wannacry.exe"
1⤵
PID:4900
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4900 -s 200
  2⤵
  - Program crash
  PID:912

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4900 -ip 4900
1⤵
PID:3444