General
- Target 2026-07-08_f55c1568bbde3fa1c4826b8349b51f0a_coinminer_darkgate_darpapox_elex_gcleaner_nymaim_rhadamanthys_wannacry
- Size 2.2MB
- Sample260708-ye6faagx5w
- SHA256 65b5f6722f7626dfd13fe362dc2fdb5849058684ae07e5e62037678ef02bc57b
- MD5 f55c1568bbde3fa1c4826b8349b51f0a
- SHA1 b2e448b331f04be8c201474b4417e70833b8b1d1
- SHA512 26442f1b1abf48b8ea79e920cafa3d7e0301125def8c280edc084263d4821e10395df8da3079be6175029b70916f0704ca3126380af3b50638e5ed0bfa9ffc16
- SSDEEP 49152:EsplG84b19bTChxKCnFnQXBbrtgb/iQvu0UHOb:blG196hxvWbrtUTrUHOb
- TLSH T1BEB5F1216790CC32E21BD6754ADA6F75B4377A213B33CC462F8419341FB4E4BE79A292
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_f55c1568bbde3fa1c4826b8349b51f0a_coinminer_darkgate_darpapox_elex_gcleaner_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_f55c1568bbde3fa1c4826b8349b51f0a_coinminer_darkgate_darpapox_elex_gcleaner_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_f55c1568bbde3fa1c4826b8349b51f0a_coinminer_darkgate_darpapox_elex_gcleaner_nymaim_rhadamanthys_wannacry
- Size 2.2MB
- SHA256 65b5f6722f7626dfd13fe362dc2fdb5849058684ae07e5e62037678ef02bc57b
- MD5 f55c1568bbde3fa1c4826b8349b51f0a
- SHA1 b2e448b331f04be8c201474b4417e70833b8b1d1
- SHA512 26442f1b1abf48b8ea79e920cafa3d7e0301125def8c280edc084263d4821e10395df8da3079be6175029b70916f0704ca3126380af3b50638e5ed0bfa9ffc16
- SSDEEP 49152:EsplG84b19bTChxKCnFnQXBbrtgb/iQvu0UHOb:blG196hxvWbrtUTrUHOb
- TLSH T1BEB5F1216790CC32E21BD6754ADA6F75B4377A213B33CC462F8419341FB4E4BE79A292
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory