General
- Target 2026-07-02_29d2958b952790dc2478664dc7f0ae65_coinminer_elex_upatre_wannacry
- Size 29KB
- Sample260702-qshblscv4k
- SHA256 7b7e684a517e23aadb5f72f2585f87abf403879c759eead242dea56662e9bcf2
- MD5 29d2958b952790dc2478664dc7f0ae65
- SHA1 9d8e30259bdf47c4aa445289797ed41381de8730
- SHA512 08e8242090d6e3b3f138df6f0df1291325718bdeb1af9344a959069d1518f2ae76e29cb602e545adf3ffa249a36f52c1ddd9e030b41d8e779db0a1e4423fbf13
- SSDEEP 384:LLz3qWcd5DUVQQ4oM+JKcMef9YlWRhQIUY/FYHZxgO8vixamynIsfIsT:Xz3qWc7Re1Jen6hpFwxgOTE5jfl
- TLSH T1C9D2E8DED9864989CC853F3B92FE5B1091189E1D87A45AE7E9A4FC438E7E2C14C31C9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-02_29d2958b952790dc2478664dc7f0ae65_coinminer_elex_upatre_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_29d2958b952790dc2478664dc7f0ae65_coinminer_elex_upatre_wannacry
- Size 29KB
- SHA256 7b7e684a517e23aadb5f72f2585f87abf403879c759eead242dea56662e9bcf2
- MD5 29d2958b952790dc2478664dc7f0ae65
- SHA1 9d8e30259bdf47c4aa445289797ed41381de8730
- SHA512 08e8242090d6e3b3f138df6f0df1291325718bdeb1af9344a959069d1518f2ae76e29cb602e545adf3ffa249a36f52c1ddd9e030b41d8e779db0a1e4423fbf13
- SSDEEP 384:LLz3qWcd5DUVQQ4oM+JKcMef9YlWRhQIUY/FYHZxgO8vixamynIsfIsT:Xz3qWc7Re1Jen6hpFwxgOTE5jfl
- TLSH T1C9D2E8DED9864989CC853F3B92FE5B1091189E1D87A45AE7E9A4FC438E7E2C14C31C9C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE