2026-06-27_eafe2da2c4d32399b84b4e46b2204480_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry

General

Target
2026-06-27_eafe2da2c4d32399b84b4e46b2204480_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
Size 328KB
Sample260629-b284csbx2q
SHA256 93ade0a7e40ab35c3130eb45a1c978da394464fbf32251bad9f69de74f15fa15
MD5 eafe2da2c4d32399b84b4e46b2204480
SHA1 68dcbb42c51f11cb89d8d56d25910db86974bffe
SHA512 96162b9f3ddad41fafb51430684d3c2f5a5ccf2f457035ddf0aa938efd1b0d8058af7445380d8ed073683094cae654fbcf5db8d0730e2096c9239c9eb515a6e5
SSDEEP 6144:Y7pqcWxc5tTBsJWKFGUOfCrgv51bXQkRnSSMGk6v0HT:sMpxc5tTG7FE6WfjRVRv0HT
TLSH
T10364E1193AD089F2C06FD0B7C1E1BB29F67732311316D98B2B6C96751D73662F6212CA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-27_eafe2da2c4d32399b84b4e46b2204480_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry

File Explorer

2026-06-27_eafe2da2c4d32399b84b4e46b2204480_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry

.exe 328KB

2026-06-27_eafe2da2c4d32399b84b4e46b2204480_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry

IMPHASH 8ee1d6ac14557b768dcccdd9bb83afc0
SHA256 93ade0a7e40ab35c3130eb45a1c978da394464fbf32251bad9f69de74f15fa15
MD5 eafe2da2c4d32399b84b4e46b2204480
SHA1 68dcbb42c51f11cb89d8d56d25910db86974bffe
SHA512 96162b9f3ddad41fafb51430684d3c2f5a5ccf2f457035ddf0aa938efd1b0d8058af7445380d8ed073683094cae654fbcf5db8d0730e2096c9239c9eb515a6e5
SSDEEP 6144:Y7pqcWxc5tTBsJWKFGUOfCrgv51bXQkRnSSMGk6v0HT:sMpxc5tTG7FE6WfjRVRv0HT
TLSH
T10364E1193AD089F2C06FD0B7C1E1BB29F67732311316D98B2B6C96751D73662F6212CA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

38378

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcAddress GetModuleHandleW GetEnvironmentVariableW GetLastError CreateDirectoryW FindClose FindFirstFileW CloseHandle CreateFileW FreeLibrary OpenProcess WideCharToMultiByte TerminateProcess GetCommandLineW GetModuleFileNameW CreateProcessW lstrlenW GetTempPathW GetModuleHandleA GetOEMCP GetACP SetEndOfFile FlushFileBuffers SetStdHandle GetStringTypeW HeapAlloc GetProcessHeap VirtualAlloc VirtualProtect VirtualFree LoadLibraryA IsBadReadPtr HeapFree DeleteFileW GetTempFileNameW CopyFileW RtlUnwind InterlockedDecrement InterlockedIncrement RaiseException GetStartupInfoW GetVersion ExitProcess HeapReAlloc GetCurrentThreadId TlsSetValue TlsAlloc SetLastError TlsGetValue InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetCurrentProcess HeapSize HeapDestroy HeapCreate IsBadWritePtr SetUnhandledExceptionFilter UnhandledExceptionFilter FreeEnvironmentStringsA MultiByteToWideChar FreeEnvironmentStringsW GetEnvironmentStringsW GetEnvironmentStrings GetCommandLineA SetHandleCount GetStdHandle GetFileType GetStartupInfoA WriteFile GetModuleFileNameA SetFilePointer ReadFile IsBadCodePtr LCMapStringA LCMapStringW GetCPInfo GetStringTypeA

shell32

CommandLineToArgvW

psapi

GetModuleFileNameExW

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-27_eafe2da2c4d32399b84b4e46b2204480_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry

kernel32

shell32

psapi

generic