General
- Target 2026-07-02_9c5dab26d149c2e9e7141e717c2497bf_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.7MB
- Sample260702-2kr2macx2q
- SHA256 372a49dd6e0c84c282863b11400a7f70ad903fa3699b0e38d88db62173009f5d
- MD5 9c5dab26d149c2e9e7141e717c2497bf
- SHA1 21621d25a55d6d96e3e4d90599c2c2657b3d4adf
- SHA512 d3a83835868f117944884a05254eacb9de61f41f99fc37358a0f2c52e446e647c209b163eff0205f3ad5787c5237f5c256a1301ce3a3d11d98b12b4b11864159
- SSDEEP 24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UNh:mbTChxKCnFnQXBbrtgb/iQvu0UHOQ
- TLSH T14F85EF252390CD61F36FD07683D16E79B9B329213B33D886AE4855316BF1E2FE381196
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_9c5dab26d149c2e9e7141e717c2497bf_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_9c5dab26d149c2e9e7141e717c2497bf_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_9c5dab26d149c2e9e7141e717c2497bf_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.7MB
- SHA256 372a49dd6e0c84c282863b11400a7f70ad903fa3699b0e38d88db62173009f5d
- MD5 9c5dab26d149c2e9e7141e717c2497bf
- SHA1 21621d25a55d6d96e3e4d90599c2c2657b3d4adf
- SHA512 d3a83835868f117944884a05254eacb9de61f41f99fc37358a0f2c52e446e647c209b163eff0205f3ad5787c5237f5c256a1301ce3a3d11d98b12b4b11864159
- SSDEEP 24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UNh:mbTChxKCnFnQXBbrtgb/iQvu0UHOQ
- TLSH T14F85EF252390CD61F36FD07683D16E79B9B329213B33D886AE4855316BF1E2FE381196
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory