General
- Target 2026-07-05_12751032f03b848c08684c658f9927c0_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.7MB
- Sample260705-eh62facz7l
- SHA256 93cd8c72a92c82ad370232bfb07067843ca5d1e651f58d48476af03b8b3cabf6
- MD5 12751032f03b848c08684c658f9927c0
- SHA1 70aa8aa6e6f06493feba0186254d31fad62cd2c9
- SHA512 14601dcf8a0f36dde5b1878816e81426acee7121e815ab454a9c2a7e7f242c7a978c6335fe779578249fb1ad5ea05762216482873ebfd6c0f6eebd3bd6ad2cfc
- SSDEEP 24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UNK:mbTChxKCnFnQXBbrtgb/iQvu0UHO/
- TLSH T15F85EF252390CD61F36FD07683D16E79B9B329213B33D886AE4855316BF1E2FE381196
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_12751032f03b848c08684c658f9927c0_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_12751032f03b848c08684c658f9927c0_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_12751032f03b848c08684c658f9927c0_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.7MB
- SHA256 93cd8c72a92c82ad370232bfb07067843ca5d1e651f58d48476af03b8b3cabf6
- MD5 12751032f03b848c08684c658f9927c0
- SHA1 70aa8aa6e6f06493feba0186254d31fad62cd2c9
- SHA512 14601dcf8a0f36dde5b1878816e81426acee7121e815ab454a9c2a7e7f242c7a978c6335fe779578249fb1ad5ea05762216482873ebfd6c0f6eebd3bd6ad2cfc
- SSDEEP 24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UNK:mbTChxKCnFnQXBbrtgb/iQvu0UHO/
- TLSH T15F85EF252390CD61F36FD07683D16E79B9B329213B33D886AE4855316BF1E2FE381196
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory