General
- Target 2026-07-07_3a7fe77d2b4da75fc91912e9b06a0a57_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.6MB
- Sample260707-3erpcafy9z
- SHA256 9ea19db78139d01b25630666378f81cf2db599dc7871a2c361c8a6e8fa0a755c
- MD5 3a7fe77d2b4da75fc91912e9b06a0a57
- SHA1 b3b146d75565dc8ceb13b2d20e87b6d5541f1078
- SHA512 7921d8a9a63aacc7a87fdec19def27e1d8871a861a0e2749fd90a626f0c62b6067330b6ba06b4e5422e08d6d6fe65d66a724ecd29ab28fac153099a3eba368ef
- SSDEEP 24576:fIXW/8yw1ez54lIYF5SXYH/GRzatThRiVNbLGJv6plFh9iGa2oMYMgdsHGePu:Q9bC4lIl58TjFJspDLoVMgdkLPu
- TLSH T18D75E021B782C0B2E65BA07055E59F717937BA35233789C3AFA02C351EB05C6E77934A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_3a7fe77d2b4da75fc91912e9b06a0a57_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_3a7fe77d2b4da75fc91912e9b06a0a57_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260706-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_3a7fe77d2b4da75fc91912e9b06a0a57_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.6MB
- SHA256 9ea19db78139d01b25630666378f81cf2db599dc7871a2c361c8a6e8fa0a755c
- MD5 3a7fe77d2b4da75fc91912e9b06a0a57
- SHA1 b3b146d75565dc8ceb13b2d20e87b6d5541f1078
- SHA512 7921d8a9a63aacc7a87fdec19def27e1d8871a861a0e2749fd90a626f0c62b6067330b6ba06b4e5422e08d6d6fe65d66a724ecd29ab28fac153099a3eba368ef
- SSDEEP 24576:fIXW/8yw1ez54lIYF5SXYH/GRzatThRiVNbLGJv6plFh9iGa2oMYMgdsHGePu:Q9bC4lIl58TjFJspDLoVMgdkLPu
- TLSH T18D75E021B782C0B2E65BA07055E59F717937BA35233789C3AFA02C351EB05C6E77934A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of file extensions in Explorer
-
Modifies visibility of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
2Hidden Files and Directories
2Modify Registry
3