General
- Target 2026-07-02_8475aa061c6d4b0f3aba4dc3d9d94c6e_coinminer_elex_wannacry
- Size 488KB
- Sample260702-vq2ppaav9t
- SHA256 bb959bb7a07e3239436ef00dcf584ae0ba7fd1e28e8b47029e2ef988b69f41da
- MD5 8475aa061c6d4b0f3aba4dc3d9d94c6e
- SHA1 d1315574963fa045d4291ec82af2411920902562
- SHA512 2e8c83e9e03e3b2416441f69f9df274e77fdbd50331639a2f37eaf7e90d31499c25500fbfa61c55e5e20bd698c82dfe4ba4a34e768cf241412c322b412df3021
- SSDEEP 6144:mAEB/NMlfBckp97lw+VycnCae7Bau/1v3yaN9sOq:mAERNMkk97u2Ca093yOVq
- TLSH T14EB4BDB8311BE91CF6E1097C6F119EB566606D7B5CB5883321C03FBD9AF0E625AE41C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_8475aa061c6d4b0f3aba4dc3d9d94c6e_coinminer_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_8475aa061c6d4b0f3aba4dc3d9d94c6e_coinminer_elex_wannacry.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_8475aa061c6d4b0f3aba4dc3d9d94c6e_coinminer_elex_wannacry
- Size 488KB
- SHA256 bb959bb7a07e3239436ef00dcf584ae0ba7fd1e28e8b47029e2ef988b69f41da
- MD5 8475aa061c6d4b0f3aba4dc3d9d94c6e
- SHA1 d1315574963fa045d4291ec82af2411920902562
- SHA512 2e8c83e9e03e3b2416441f69f9df274e77fdbd50331639a2f37eaf7e90d31499c25500fbfa61c55e5e20bd698c82dfe4ba4a34e768cf241412c322b412df3021
- SSDEEP 6144:mAEB/NMlfBckp97lw+VycnCae7Bau/1v3yaN9sOq:mAERNMkk97u2Ca093yOVq
- TLSH T14EB4BDB8311BE91CF6E1097C6F119EB566606D7B5CB5883321C03FBD9AF0E625AE41C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.