General
- Target 2026-06-25_3e22a69687a83267df09fc9c67098d53_coinminer_elex_wannacry
- Size 488KB
- Sample260629-2v1fraas4p
- SHA256 a9db408eae6a6c148c15d971cbe68d3ef084ab5b2ef151107ad7fe788407fb2b
- MD5 3e22a69687a83267df09fc9c67098d53
- SHA1 c7dc5d19d1b8c7ec04c65f25059cee200bcccb34
- SHA512 fafdecc5b5eecb8e61c6a8eb41f0d6fa297932d09c70979b4e88499000b9ccafa328bbd850b48b80d73708bdbd25a78c5164393c1dd4dcc3ec747d6d87a2ac53
- SSDEEP 6144:mAE8cVQqYtNoMeffdbLodJJypS7p4MOEJkau/1v3yaN9sOq:mAEeqYtNoRffdod/y47Soq93yOVq
- TLSH T12AB49D843976C87FE3E007F9585ACAE826AD7E663E63C89B71433FEF11359D14900A85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-25_3e22a69687a83267df09fc9c67098d53_coinminer_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-25_3e22a69687a83267df09fc9c67098d53_coinminer_elex_wannacry.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-25_3e22a69687a83267df09fc9c67098d53_coinminer_elex_wannacry
- Size 488KB
- SHA256 a9db408eae6a6c148c15d971cbe68d3ef084ab5b2ef151107ad7fe788407fb2b
- MD5 3e22a69687a83267df09fc9c67098d53
- SHA1 c7dc5d19d1b8c7ec04c65f25059cee200bcccb34
- SHA512 fafdecc5b5eecb8e61c6a8eb41f0d6fa297932d09c70979b4e88499000b9ccafa328bbd850b48b80d73708bdbd25a78c5164393c1dd4dcc3ec747d6d87a2ac53
- SSDEEP 6144:mAE8cVQqYtNoMeffdbLodJJypS7p4MOEJkau/1v3yaN9sOq:mAEeqYtNoRffdod/y47Soq93yOVq
- TLSH T12AB49D843976C87FE3E007F9585ACAE826AD7E663E63C89B71433FEF11359D14900A85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.