General
- Target 2026-06-30_79b284db020b1b4d96e3272ef184dc80_coinminer_elex_lumma-stealer_nymaim_rhadamanthys_wannacry
- Size 3.0MB
- Sample260701-evdwesd17m
- SHA256 10dec603a4453a502722334dc72f580313b5ace117293bf897bb6b8c339539ab
- MD5 79b284db020b1b4d96e3272ef184dc80
- SHA1 7aec29ac060452e557bd96ddb8780bbb684ca435
- SHA512 cec2dd3d8ae61f750d2237cfcf3924bd83026fa6479804f3be0a56dea90e8f70fc9da51eb97295283c7142bc0e9732b5f2c6e03cab3b5c780da7074521106835
- SSDEEP 98304:zvY5q7eEShuTid6yNKmGYSFJspDLOMgd:jn7eEkuAGVIDLw
- TLSH T120E523193B90CC61F3AFD17256D0AF30B27729202732CE5A5F4895392BF1E5EE792252
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_79b284db020b1b4d96e3272ef184dc80_coinminer_elex_lumma-stealer_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_79b284db020b1b4d96e3272ef184dc80_coinminer_elex_lumma-stealer_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260630-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_79b284db020b1b4d96e3272ef184dc80_coinminer_elex_lumma-stealer_nymaim_rhadamanthys_wannacry
- Size 3.0MB
- SHA256 10dec603a4453a502722334dc72f580313b5ace117293bf897bb6b8c339539ab
- MD5 79b284db020b1b4d96e3272ef184dc80
- SHA1 7aec29ac060452e557bd96ddb8780bbb684ca435
- SHA512 cec2dd3d8ae61f750d2237cfcf3924bd83026fa6479804f3be0a56dea90e8f70fc9da51eb97295283c7142bc0e9732b5f2c6e03cab3b5c780da7074521106835
- SSDEEP 98304:zvY5q7eEShuTid6yNKmGYSFJspDLOMgd:jn7eEkuAGVIDLw
- TLSH T120E523193B90CC61F3AFD17256D0AF30B27729202732CE5A5F4895392BF1E5EE792252
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application