General
- Target 2026-06-29_b466acb84ba04c298f641a94ae6ba57b_coinminer_elex_nymaim_rhadamanthys_wannacry
- Size 2.4MB
- Sample260630-e9jp8aex3s
- SHA256 9170d780b408f83d9fd7354078e2d827c5efdfbd426d1324c25951db13cdd93b
- MD5 b466acb84ba04c298f641a94ae6ba57b
- SHA1 9392400813ef4181ad489dace991b38eccd852bc
- SHA512 3bb7e0753ac30af6f00bd53718ac0a0feb027323a5e5d54533dad11e834e463b93dcd980c77a88de8f098d01e50f620f0b9e1629e42d66c899ff921fb07b06fa
- SSDEEP 49152:q8f2HYF/A0AxnCZ5OTexHlPRhOH2wPR+568TjFJspDLoVMgdkc:Z6mKtCPz5YH2wJ+56SFJspDLOMgdV
- TLSH T1E9C522861762C661F25FC17267E01F30B973B921A377CECA3E0491B40BF3D6AD6A1199
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-29_b466acb84ba04c298f641a94ae6ba57b_coinminer_elex_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_b466acb84ba04c298f641a94ae6ba57b_coinminer_elex_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260629-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_b466acb84ba04c298f641a94ae6ba57b_coinminer_elex_nymaim_rhadamanthys_wannacry
- Size 2.4MB
- SHA256 9170d780b408f83d9fd7354078e2d827c5efdfbd426d1324c25951db13cdd93b
- MD5 b466acb84ba04c298f641a94ae6ba57b
- SHA1 9392400813ef4181ad489dace991b38eccd852bc
- SHA512 3bb7e0753ac30af6f00bd53718ac0a0feb027323a5e5d54533dad11e834e463b93dcd980c77a88de8f098d01e50f620f0b9e1629e42d66c899ff921fb07b06fa
- SSDEEP 49152:q8f2HYF/A0AxnCZ5OTexHlPRhOH2wPR+568TjFJspDLoVMgdkc:Z6mKtCPz5YH2wJ+56SFJspDLOMgdV
- TLSH T1E9C522861762C661F25FC17267E01F30B973B921A377CECA3E0491B40BF3D6AD6A1199
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory