General
- Target 2026-06-29_dd7af66c1ea8e5511b6fdc86cf733e29_coinminer_darpapox_elex_nymaim_rhadamanthys_wannacry
- Size 2.5MB
- Sample260630-c3dvaacy61
- SHA256 dddbdafe61f1da2c4ab02435e958e5c877ca6a92728f61a6a8df7d078f119314
- MD5 dd7af66c1ea8e5511b6fdc86cf733e29
- SHA1 766edaefebeb996a0febbc9b9cd23015947e853c
- SHA512 731b1d54eb8bf9b9ab39f36ca72d2ed05087c8a20c352fcb733a131ef77475788782e1b96b7553469d7aa7bab417900ae03b25b40532a43ec48ad574b0169e77
- SSDEEP 49152:edHt9bTChxKCnFnQXBbrtgb/iQvu0UHOaYmB:o96hxvWbrtUTrUHO2B
- TLSH T145C5C031AB44CC70D21EA0B4DADF7AF8F53B2841333ECD965610ACBF95B1616DA691C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-29_dd7af66c1ea8e5511b6fdc86cf733e29_coinminer_darpapox_elex_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_dd7af66c1ea8e5511b6fdc86cf733e29_coinminer_darpapox_elex_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260629-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_dd7af66c1ea8e5511b6fdc86cf733e29_coinminer_darpapox_elex_nymaim_rhadamanthys_wannacry
- Size 2.5MB
- SHA256 dddbdafe61f1da2c4ab02435e958e5c877ca6a92728f61a6a8df7d078f119314
- MD5 dd7af66c1ea8e5511b6fdc86cf733e29
- SHA1 766edaefebeb996a0febbc9b9cd23015947e853c
- SHA512 731b1d54eb8bf9b9ab39f36ca72d2ed05087c8a20c352fcb733a131ef77475788782e1b96b7553469d7aa7bab417900ae03b25b40532a43ec48ad574b0169e77
- SSDEEP 49152:edHt9bTChxKCnFnQXBbrtgb/iQvu0UHOaYmB:o96hxvWbrtUTrUHO2B
- TLSH T145C5C031AB44CC70D21EA0B4DADF7AF8F53B2841333ECD965610ACBF95B1616DA691C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory