General
- Target 2026-07-07_c8f95183327ffd6cc04794a6a0ccecd8_coinminer_elex_gh0st-rat_wannacry
- Size 257KB
- Sample260707-hwhsjsb151
- SHA256 c595156b4b704ef58fc04262b0e0ccfb1f2240f60dcd0f81631dd58738436912
- MD5 c8f95183327ffd6cc04794a6a0ccecd8
- SHA1 83c8fd15fe265d3cb33db5ec4c71ae2948110434
- SHA512 7cdc84c5526db0ac85c36265729393cfd6f11c61d6722f59893ec464c0729e6a28485c76d7bae5b4633ae4630584f4ba1fa165012a6a2ff6047323eaa9b6adec
- SSDEEP 6144:XsdXFryQfP7nn+b0ACnaZIrfdwX3MmIOs:XsdXFfP7nn+brSfOnMmX
- TLSH T16944BE223AD9C8FAD2932271CB49B7EAD1F9DB180814493323142E5D7FBE846931D71E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-07_c8f95183327ffd6cc04794a6a0ccecd8_coinminer_elex_gh0st-rat_wannacry.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_c8f95183327ffd6cc04794a6a0ccecd8_coinminer_elex_gh0st-rat_wannacry.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_c8f95183327ffd6cc04794a6a0ccecd8_coinminer_elex_gh0st-rat_wannacry
- Size 257KB
- SHA256 c595156b4b704ef58fc04262b0e0ccfb1f2240f60dcd0f81631dd58738436912
- MD5 c8f95183327ffd6cc04794a6a0ccecd8
- SHA1 83c8fd15fe265d3cb33db5ec4c71ae2948110434
- SHA512 7cdc84c5526db0ac85c36265729393cfd6f11c61d6722f59893ec464c0729e6a28485c76d7bae5b4633ae4630584f4ba1fa165012a6a2ff6047323eaa9b6adec
- SSDEEP 6144:XsdXFryQfP7nn+b0ACnaZIrfdwX3MmIOs:XsdXFfP7nn+brSfOnMmX
- TLSH T16944BE223AD9C8FAD2932271CB49B7EAD1F9DB180814493323142E5D7FBE846931D71E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.