General
- Target 2026-07-01_5142409e5a619d3c4274ef8f4d89ac07_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.0MB
- Sample260701-sty2vsaz6z
- SHA256 43aa9aaf7e22e0dbcccd5bc6c31f3a535d3cb27a6dbe602e0e542291512bc56a
- MD5 5142409e5a619d3c4274ef8f4d89ac07
- SHA1 30c4cf8a9c26e506a8e0c18e0dda8b4b047f12ae
- SHA512 ddb2d9c06a6f82ee4f1939a7945149a1dbb188185601aaa2f13c2e0574f0e223e9f4e26d282609971c981d9af8a54b816e86f64d92970ffe9f7a6796356f1c28
- SSDEEP 24576:qGRzatThRiVNbLGJv6plFh9iGa2oMYMgdsHGeE:D8TjFJspDLoVMgdkLE
- TLSH T17835F0092790CC61F3AFC07296E06E34B67729203733CD4A5E4896791BF1E5FE7A1266
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-01_5142409e5a619d3c4274ef8f4d89ac07_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
2026-07-01_5142409e5a619d3c4274ef8f4d89ac07_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260629-en
Malware Config
Targets
-
- Target 2026-07-01_5142409e5a619d3c4274ef8f4d89ac07_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.0MB
- SHA256 43aa9aaf7e22e0dbcccd5bc6c31f3a535d3cb27a6dbe602e0e542291512bc56a
- MD5 5142409e5a619d3c4274ef8f4d89ac07
- SHA1 30c4cf8a9c26e506a8e0c18e0dda8b4b047f12ae
- SHA512 ddb2d9c06a6f82ee4f1939a7945149a1dbb188185601aaa2f13c2e0574f0e223e9f4e26d282609971c981d9af8a54b816e86f64d92970ffe9f7a6796356f1c28
- SSDEEP 24576:qGRzatThRiVNbLGJv6plFh9iGa2oMYMgdsHGeE:D8TjFJspDLoVMgdkLE
- TLSH T17835F0092790CC61F3AFC07296E06E34B67729203733CD4A5E4896791BF1E5FE7A1266
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Privilege Escalation
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1