General
- Target 2026-07-01_f2e6c408804359085808f5694cb531ff_coinminer_elex_wannacry
- Size 488KB
- Sample260701-twm8tabx5t
- SHA256 c8ff513c7ed1d1e6cc84e4a3bae39ae1635095b62622255616c326a4ebfdf234
- MD5 f2e6c408804359085808f5694cb531ff
- SHA1 d1fadb45d9b3eead8d42f9713d728433dadc60b7
- SHA512 6d1c3f80b596bf17418d8bde1ae870388335a9cf24bd80eb3c6dcbae5c4121845cda350111f753b2cb99b79e1e715a8025b50e5263fa8a2a3ec03e9e1d27c8fa
- SSDEEP 6144:mAE/bPYQck/3f5MWAQBAfV14HdGGaau/1v3yaN9sOq:mAEzAHkffKnVKHdG193yOVq
- TLSH T155B48B237749C42CE39408725A66FFA062B19D335DDA696E690F378C4537B829B7FC02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_f2e6c408804359085808f5694cb531ff_coinminer_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_f2e6c408804359085808f5694cb531ff_coinminer_elex_wannacry.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_f2e6c408804359085808f5694cb531ff_coinminer_elex_wannacry
- Size 488KB
- SHA256 c8ff513c7ed1d1e6cc84e4a3bae39ae1635095b62622255616c326a4ebfdf234
- MD5 f2e6c408804359085808f5694cb531ff
- SHA1 d1fadb45d9b3eead8d42f9713d728433dadc60b7
- SHA512 6d1c3f80b596bf17418d8bde1ae870388335a9cf24bd80eb3c6dcbae5c4121845cda350111f753b2cb99b79e1e715a8025b50e5263fa8a2a3ec03e9e1d27c8fa
- SSDEEP 6144:mAE/bPYQck/3f5MWAQBAfV14HdGGaau/1v3yaN9sOq:mAEzAHkffKnVKHdG193yOVq
- TLSH T155B48B237749C42CE39408725A66FFA062B19D335DDA696E690F378C4537B829B7FC02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.