General
- Target 2026-07-05_0d57ef42abbb0eaebca101a7f71bd89d_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.7MB
- Sample260705-mffqgaby9x
- SHA256 8ab044cc9edaa3cd7e52ea6f4b79b055f35ee7369c5e9803e9a3ba446d574b1f
- MD5 0d57ef42abbb0eaebca101a7f71bd89d
- SHA1 ebf09878c717bce2eb8bc52a062cb052318804b1
- SHA512 3f37a33216328cfdb264add5ea38dc861ad2a4a02fb59acc4007ce0193c5441e6cb2a8c0f0eedf3520188610298e3c8007b3f57f5e1b171eb1dd2254047e4f2e
- SSDEEP 24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UNO:mbTChxKCnFnQXBbrtgb/iQvu0UHOb
- TLSH T14985EF152790CD61F36FC07283D1AE79B9B329213B33D885AE4855316BF2E2FE781196
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_0d57ef42abbb0eaebca101a7f71bd89d_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_0d57ef42abbb0eaebca101a7f71bd89d_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_0d57ef42abbb0eaebca101a7f71bd89d_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.7MB
- SHA256 8ab044cc9edaa3cd7e52ea6f4b79b055f35ee7369c5e9803e9a3ba446d574b1f
- MD5 0d57ef42abbb0eaebca101a7f71bd89d
- SHA1 ebf09878c717bce2eb8bc52a062cb052318804b1
- SHA512 3f37a33216328cfdb264add5ea38dc861ad2a4a02fb59acc4007ce0193c5441e6cb2a8c0f0eedf3520188610298e3c8007b3f57f5e1b171eb1dd2254047e4f2e
- SSDEEP 24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UNO:mbTChxKCnFnQXBbrtgb/iQvu0UHOb
- TLSH T14985EF152790CD61F36FC07283D1AE79B9B329213B33D885AE4855316BF2E2FE781196
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory