General
- Target 2026-06-03_2bd842e73bf7f89a362896fd65d65ded_coinminer_darpapox_elex_nymaim_rhadamanthys_wannacry
- Size 4.9MB
- Sample260603-bk12esfx2v
- SHA256 e50b52228e9b75ac1a35186c21d53d67e5bf5c7282485a285a92ea76c2a129e5
- MD5 2bd842e73bf7f89a362896fd65d65ded
- SHA1 c50c3b7b7415ba0676947c0703bb41e54dfd4c2f
- SHA512 3bdb9668d9a55a1dee28c7c53040af943bcb5ee2aab4471faae62df54ac5cfbfb3c90edda80843576336488cb6bddfee0265bc847f02d3c88c950b1470e0145a
- SSDEEP 98304:DZt+Z5AKBbr30e1qKcAKBJr3Ca+ZyZ01qmc/56hxvWbrtUTrUHOG:Dr+ZeKBbr30IKBJr3Ca+ZyF8x+NcIOG
- TLSH T1CF362203228CFCE1E27B8172A3F35BE4E37FE9542766D8495AC402354ABD65BB6017C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-03_2bd842e73bf7f89a362896fd65d65ded_coinminer_darpapox_elex_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-03_2bd842e73bf7f89a362896fd65d65ded_coinminer_darpapox_elex_nymaim_rhadamanthys_wannacry.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-03_2bd842e73bf7f89a362896fd65d65ded_coinminer_darpapox_elex_nymaim_rhadamanthys_wannacry
- Size 4.9MB
- SHA256 e50b52228e9b75ac1a35186c21d53d67e5bf5c7282485a285a92ea76c2a129e5
- MD5 2bd842e73bf7f89a362896fd65d65ded
- SHA1 c50c3b7b7415ba0676947c0703bb41e54dfd4c2f
- SHA512 3bdb9668d9a55a1dee28c7c53040af943bcb5ee2aab4471faae62df54ac5cfbfb3c90edda80843576336488cb6bddfee0265bc847f02d3c88c950b1470e0145a
- SSDEEP 98304:DZt+Z5AKBbr30e1qKcAKBJr3Ca+ZyZ01qmc/56hxvWbrtUTrUHOG:Dr+ZeKBbr30IKBJr3Ca+ZyF8x+NcIOG
- TLSH T1CF362203228CFCE1E27B8172A3F35BE4E37FE9542766D8495AC402354ABD65BB6017C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Adds Run key to start application
Drops file in System32 directory