General
- Target 2026-07-04_55cdc7bf74a1151485212845e9f90c16_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.7MB
- Sample260704-st5jmsg17w
- SHA256 3e3fd03051912ebfec20aa89ab0d120f7c2a007c118ddaeba374d4e0afe53e25
- MD5 55cdc7bf74a1151485212845e9f90c16
- SHA1 6ee170cee7430fea1bc66c310c9dc17c087a9fb4
- SHA512 04eb93c35e858f28c83573d8d32153e97cdcb65eb8f15943e1e9fdd1a5010da8fbc3ea7ce30ec6b3ae4ac4b47f4529d266cc7de42538033b38218b99755d3d49
- SSDEEP 24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UNE:mbTChxKCnFnQXBbrtgb/iQvu0UHOR
- TLSH T14285FF252790CDA1F36FC07283E56E79B5B329213733D8966E4851312BF2E2FE781196
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-04_55cdc7bf74a1151485212845e9f90c16_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_55cdc7bf74a1151485212845e9f90c16_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_55cdc7bf74a1151485212845e9f90c16_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.7MB
- SHA256 3e3fd03051912ebfec20aa89ab0d120f7c2a007c118ddaeba374d4e0afe53e25
- MD5 55cdc7bf74a1151485212845e9f90c16
- SHA1 6ee170cee7430fea1bc66c310c9dc17c087a9fb4
- SHA512 04eb93c35e858f28c83573d8d32153e97cdcb65eb8f15943e1e9fdd1a5010da8fbc3ea7ce30ec6b3ae4ac4b47f4529d266cc7de42538033b38218b99755d3d49
- SSDEEP 24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UNE:mbTChxKCnFnQXBbrtgb/iQvu0UHOR
- TLSH T14285FF252790CDA1F36FC07283E56E79B5B329213733D8966E4851312BF2E2FE781196
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory