General
- Target 2026-07-07_94598b98872f0c0e50270d2b0e458155_coinminer_elex_upatre_wannacry
- Size 29KB
- Sample260707-l86a6afv81
- SHA256 8837190dd7866bedaed5c144d519ce27aea852481e6657a3cecb5708e2d6d5f9
- MD5 94598b98872f0c0e50270d2b0e458155
- SHA1 3aaab24ca4c4fb614f9233b5571bca1281aa6999
- SHA512 2073f9cdbcf82153c6b64e9415847798d8f1d17421571b34290b34dcd83951ea0bdb9faa76cc30931c40bff20dfebf35ae9f7ed57a27269f099009db60708b7e
- SSDEEP 384:LLz3qWcd5DUVQQ4oM+JKcMef9YlWRhQIUY/FYHZxgO8vixamynIsfgsTWB:Xz3qWc7Re1Jen6hpFwxgOTE5jftSB
- TLSH T114D2F8DEC9864959C8853F3B92FA5B0091189E1D87A55AEBE9A8FC438D7F3C14C31C9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-07_94598b98872f0c0e50270d2b0e458155_coinminer_elex_upatre_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_94598b98872f0c0e50270d2b0e458155_coinminer_elex_upatre_wannacry
- Size 29KB
- SHA256 8837190dd7866bedaed5c144d519ce27aea852481e6657a3cecb5708e2d6d5f9
- MD5 94598b98872f0c0e50270d2b0e458155
- SHA1 3aaab24ca4c4fb614f9233b5571bca1281aa6999
- SHA512 2073f9cdbcf82153c6b64e9415847798d8f1d17421571b34290b34dcd83951ea0bdb9faa76cc30931c40bff20dfebf35ae9f7ed57a27269f099009db60708b7e
- SSDEEP 384:LLz3qWcd5DUVQQ4oM+JKcMef9YlWRhQIUY/FYHZxgO8vixamynIsfgsTWB:Xz3qWc7Re1Jen6hpFwxgOTE5jftSB
- TLSH T114D2F8DEC9864959C8853F3B92FA5B0091189E1D87A55AEBE9A8FC438D7F3C14C31C9C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE