General
- Target 2026-07-08_5ce713785d615edb8eab2149f897d26f_coinminer_elex_redline-stealer_stop_wannacry
- Size 8.9MB
- Sample260708-wfxtese13y
- SHA256 3783111381f071e18eda5fb96f579da76226ab56bf03093e6b637cf5092235de
- MD5 5ce713785d615edb8eab2149f897d26f
- SHA1 1f179d7a8652af3e570d5ba3d036e9e67f74ca2d
- SHA512 0011a639e6a42921069f5ae5abea7e30851cbb8a100430b81e55cf92a138ecfbafc7e8dee617bee303a0a1f5326db126174bee4d988228e1d3eac79319ff3386
- SSDEEP 24576:1dbCtm53/gbBFdX/cUczf/gbBFdXhNjz2/gbBFdXHz:qm53/WBFNcVf/WBFR2/WBFZ
- TLSH T19896C0C2B7848072E4A211380A6783610FAABC915B37B6C7F7507A5EAE33EC45D76747
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-08_5ce713785d615edb8eab2149f897d26f_coinminer_elex_redline-stealer_stop_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_5ce713785d615edb8eab2149f897d26f_coinminer_elex_redline-stealer_stop_wannacry.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_5ce713785d615edb8eab2149f897d26f_coinminer_elex_redline-stealer_stop_wannacry
- Size 8.9MB
- SHA256 3783111381f071e18eda5fb96f579da76226ab56bf03093e6b637cf5092235de
- MD5 5ce713785d615edb8eab2149f897d26f
- SHA1 1f179d7a8652af3e570d5ba3d036e9e67f74ca2d
- SHA512 0011a639e6a42921069f5ae5abea7e30851cbb8a100430b81e55cf92a138ecfbafc7e8dee617bee303a0a1f5326db126174bee4d988228e1d3eac79319ff3386
- SSDEEP 24576:1dbCtm53/gbBFdX/cUczf/gbBFdXhNjz2/gbBFdXHz:qm53/WBFNcVf/WBFR2/WBFZ
- TLSH T19896C0C2B7848072E4A211380A6783610FAABC915B37B6C7F7507A5EAE33EC45D76747
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Drops file in System32 directory