General
- Target 2026-06-27_a192edb50336c4e07538e5b88d1e380f_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 973KB
- Sample260629-e3rggses9p
- SHA256 5b5bc66b3278398ebbd1ca1106f76906aaf5d1275db7e4feacb90e275265301b
- MD5 a192edb50336c4e07538e5b88d1e380f
- SHA1 944bc828985ef3230a3be485c4062968eaa2805e
- SHA512 c1993d98fad2139362870a5411e24258cd5cd8bc9ed299bf7f6f06cfa5deeaf8fe8612566500711a5affb3a87e13aa663c2733aff0feef91a1b65d57044c30ce
- SSDEEP 24576:1GRzatThRiVNbLGJv6plFh9iGa2oMYMgdsHGeC:o8TjFJspDLoVMgdkLC
- TLSH T1F825F0196B80CDA1F26FC07286D06F34B6772A202733CD4A6F4895391BF2E5FE792156
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_a192edb50336c4e07538e5b88d1e380f_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_a192edb50336c4e07538e5b88d1e380f_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260618-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_a192edb50336c4e07538e5b88d1e380f_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 973KB
- SHA256 5b5bc66b3278398ebbd1ca1106f76906aaf5d1275db7e4feacb90e275265301b
- MD5 a192edb50336c4e07538e5b88d1e380f
- SHA1 944bc828985ef3230a3be485c4062968eaa2805e
- SHA512 c1993d98fad2139362870a5411e24258cd5cd8bc9ed299bf7f6f06cfa5deeaf8fe8612566500711a5affb3a87e13aa663c2733aff0feef91a1b65d57044c30ce
- SSDEEP 24576:1GRzatThRiVNbLGJv6plFh9iGa2oMYMgdsHGeC:o8TjFJspDLoVMgdkLC
- TLSH T1F825F0196B80CDA1F26FC07286D06F34B6772A202733CD4A6F4895391BF2E5FE792156
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application