General
- Target 2026-07-09_3d290b5308bbe56500dd81168a4f119f_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.7MB
- Sample260709-p5386say6j
- SHA256 9bf8cf1b67b91faf6c97d637fb0f08c6282218741d05807505358933e9f16bea
- MD5 3d290b5308bbe56500dd81168a4f119f
- SHA1 4d6b7e1a5ae71cd961bcad2be0ada1eb825b23de
- SHA512 aef79feb8060177f3f13c36d06a6b873287844221449517c59023f6b719e8865c7dd0281ce63ee40ab05f33b262b7fd9c15e4c1aadbf59890ceabd9ed40951c8
- SSDEEP 49152:mbTChxKCnFnQXBbrtgb/iQvu0UHOaYmLp:m6hxvWbrtUTrUHO2F
- TLSH T1D285EF252790CD60F36FC07683E16E79B9B329213733D896AE4855312BF2E2FE781195
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_3d290b5308bbe56500dd81168a4f119f_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_3d290b5308bbe56500dd81168a4f119f_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_3d290b5308bbe56500dd81168a4f119f_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.7MB
- SHA256 9bf8cf1b67b91faf6c97d637fb0f08c6282218741d05807505358933e9f16bea
- MD5 3d290b5308bbe56500dd81168a4f119f
- SHA1 4d6b7e1a5ae71cd961bcad2be0ada1eb825b23de
- SHA512 aef79feb8060177f3f13c36d06a6b873287844221449517c59023f6b719e8865c7dd0281ce63ee40ab05f33b262b7fd9c15e4c1aadbf59890ceabd9ed40951c8
- SSDEEP 49152:mbTChxKCnFnQXBbrtgb/iQvu0UHOaYmLp:m6hxvWbrtUTrUHO2F
- TLSH T1D285EF252790CD60F36FC07683E16E79B9B329213733D896AE4855312BF2E2FE781195
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory