General
- Target 2026-07-03_305632baa6e2fd2b01a8ec6a0d13c425_coinminer_darpapox_elex_nymaim_rhadamanthys_trickbot_wannacry
- Size 2.6MB
- Sample260703-ndrwdscy8l
- SHA256 7cb1beb9397aaf605c3b7eafc2ed9b514af140f1077e72cf52c276dee0373c26
- MD5 305632baa6e2fd2b01a8ec6a0d13c425
- SHA1 4f52080e7f97e582411ce5109c5edee11dfe47d8
- SHA512 0953f8f8fb8d2fccd1d04d90c326cc53af1dad501ebc93fc1e326f44214d3905ac126419f5de5bfbf572ddde0c2d28e09e4b27d9ad79e28f384e4dc59b993ae8
- SSDEEP 49152:dCG3VFzbTCaxKCnFnQXBbrtgb/iQvu0UHOaYmLR:dCiVFz6axvWbrtUTrUHO29
- TLSH T154D58C02BA41C912C9298235A6F3DFF47B76B58017034B17764CAD7F2FE3796AEA0185
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_305632baa6e2fd2b01a8ec6a0d13c425_coinminer_darpapox_elex_nymaim_rhadamanthys_trickbot_wannacry.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_305632baa6e2fd2b01a8ec6a0d13c425_coinminer_darpapox_elex_nymaim_rhadamanthys_trickbot_wannacry.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_305632baa6e2fd2b01a8ec6a0d13c425_coinminer_darpapox_elex_nymaim_rhadamanthys_trickbot_wannacry
- Size 2.6MB
- SHA256 7cb1beb9397aaf605c3b7eafc2ed9b514af140f1077e72cf52c276dee0373c26
- MD5 305632baa6e2fd2b01a8ec6a0d13c425
- SHA1 4f52080e7f97e582411ce5109c5edee11dfe47d8
- SHA512 0953f8f8fb8d2fccd1d04d90c326cc53af1dad501ebc93fc1e326f44214d3905ac126419f5de5bfbf572ddde0c2d28e09e4b27d9ad79e28f384e4dc59b993ae8
- SSDEEP 49152:dCG3VFzbTCaxKCnFnQXBbrtgb/iQvu0UHOaYmLR:dCiVFz6axvWbrtUTrUHO29
- TLSH T154D58C02BA41C912C9298235A6F3DFF47B76B58017034B17764CAD7F2FE3796AEA0185
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.