General
- Target 2026-07-02_e50011353d1d198481522c6c62246480_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.6MB
- Sample260702-xyydcac14t
- SHA256 02940c2a195a397470c22ce7b74f97061bbfcd2d181f7e13dca1aea0175496ad
- MD5 e50011353d1d198481522c6c62246480
- SHA1 47c74269c15f7df432f53a75894f2e43e32efa92
- SHA512 dcbab2eeeca47c57948b1d5874fd332198687800599165714f1f4baa7edd57358c2c13fd9d9005806d21f6868a56807b7bc1f359a4cf99bac126f2372c878b99
- SSDEEP 24576:1IXW/8yw1ez54lIYF5SXYHAGRzatThRiVNbLGJv6plFh9iGa2oMYMgdsHGey:K9bC4lIlW8TjFJspDLoVMgdkLy
- TLSH T1D275E026B782C0B2E65BA07055F99B317537BA35233689C36FA02D351EB05C2F77934A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_e50011353d1d198481522c6c62246480_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_e50011353d1d198481522c6c62246480_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260629-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_e50011353d1d198481522c6c62246480_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.6MB
- SHA256 02940c2a195a397470c22ce7b74f97061bbfcd2d181f7e13dca1aea0175496ad
- MD5 e50011353d1d198481522c6c62246480
- SHA1 47c74269c15f7df432f53a75894f2e43e32efa92
- SHA512 dcbab2eeeca47c57948b1d5874fd332198687800599165714f1f4baa7edd57358c2c13fd9d9005806d21f6868a56807b7bc1f359a4cf99bac126f2372c878b99
- SSDEEP 24576:1IXW/8yw1ez54lIYF5SXYHAGRzatThRiVNbLGJv6plFh9iGa2oMYMgdsHGey:K9bC4lIlW8TjFJspDLoVMgdkLy
- TLSH T1D275E026B782C0B2E65BA07055F99B317537BA35233689C36FA02D351EB05C2F77934A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of file extensions in Explorer
-
Modifies visibility of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
2Hidden Files and Directories
2Modify Registry
3