General
- Target 2026-07-03_893c5a961d805676564fded1db42449d_coinminer_driverpack_elex_wannacry
- Size 1.0MB
- Sample260703-l1rsssbz2m
- SHA256 0518eeaf20122126b52e51614903c32456de9cc6d44f255433a2a2b6cdafe535
- MD5 893c5a961d805676564fded1db42449d
- SHA1 72bc2b914fcc0bb7c24c5b9af16ceb86664f3e2e
- SHA512 2e607e60f1c3969bdd45e27f541ffbb388603a349d0f6d2d0c9a0fbc7e0509491aa914659b3e73b0a0abb9db5cc53b329084f29752ded895c881406ffefd2eb2
- SSDEEP 24576:c53uhFO7zPhXCDDf1kLMjgae35hzmoGMmGgzK2S:c5+hFOxafPg/35FmLzZS
- TLSH T13E3512123BD790F6F5B32B319C29B758B5BEBB640B1CC9EB1B5002462D72FE592B5081
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_893c5a961d805676564fded1db42449d_coinminer_driverpack_elex_wannacry.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_893c5a961d805676564fded1db42449d_coinminer_driverpack_elex_wannacry.exe
Resource
win11ltsc2024-20260629-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_893c5a961d805676564fded1db42449d_coinminer_driverpack_elex_wannacry
- Size 1.0MB
- SHA256 0518eeaf20122126b52e51614903c32456de9cc6d44f255433a2a2b6cdafe535
- MD5 893c5a961d805676564fded1db42449d
- SHA1 72bc2b914fcc0bb7c24c5b9af16ceb86664f3e2e
- SHA512 2e607e60f1c3969bdd45e27f541ffbb388603a349d0f6d2d0c9a0fbc7e0509491aa914659b3e73b0a0abb9db5cc53b329084f29752ded895c881406ffefd2eb2
- SSDEEP 24576:c53uhFO7zPhXCDDf1kLMjgae35hzmoGMmGgzK2S:c5+hFOxafPg/35FmLzZS
- TLSH T13E3512123BD790F6F5B32B319C29B758B5BEBB640B1CC9EB1B5002462D72FE592B5081
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.