General
- Target 2026-06-05_0a46a6defeec403d8319e086a0c3372d_coinminer_elex_mimic_pay2key_wannacry
- Size 1.4MB
- Sample260605-tvalbsa131
- SHA256 251e6c675351814833a79e32e487cac5db3b1d5a82551087d6891ed06082b130
- MD5 0a46a6defeec403d8319e086a0c3372d
- SHA1 5822c46481d5ea5bb29f690412024e9bfa193ea0
- SHA512 8e492d8b707e5158bee5e5a1dc70f1bf81f3d44271a5c4fe4d10c82247ee0fadc38c0dd213c9703be565267ef42f3f3dd8d9f7fd4ff8dbeb633a10c32bcda598
- SSDEEP 24576:1XwOrRsG9A/7VxGI4M33p7rmkft0/79oJPLMRZeEv2sQEkK097Z5ob63lOiqBNOz:1gwRtAJFxp7rmk+WY2sQE/09Ye3lOiqo
- TLSH T163652331BBC2C6FEE38021B6198427656996FB301B2825C3DF441F0B99763D4AB7B2D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-05_0a46a6defeec403d8319e086a0c3372d_coinminer_elex_mimic_pay2key_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-05_0a46a6defeec403d8319e086a0c3372d_coinminer_elex_mimic_pay2key_wannacry
- Size 1.4MB
- SHA256 251e6c675351814833a79e32e487cac5db3b1d5a82551087d6891ed06082b130
- MD5 0a46a6defeec403d8319e086a0c3372d
- SHA1 5822c46481d5ea5bb29f690412024e9bfa193ea0
- SHA512 8e492d8b707e5158bee5e5a1dc70f1bf81f3d44271a5c4fe4d10c82247ee0fadc38c0dd213c9703be565267ef42f3f3dd8d9f7fd4ff8dbeb633a10c32bcda598
- SSDEEP 24576:1XwOrRsG9A/7VxGI4M33p7rmkft0/79oJPLMRZeEv2sQEkK097Z5ob63lOiqBNOz:1gwRtAJFxp7rmk+WY2sQE/09Ye3lOiqo
- TLSH T163652331BBC2C6FEE38021B6198427656996FB301B2825C3DF441F0B99763D4AB7B2D5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
AutoIT Executable
AutoIT scripts compiled to PE executables.