General
- Target 2026-07-10_c4cd5c9588378901f1c4eb1787bd61af_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.8MB
- Sample260710-1wk7saby2p
- SHA256 2acccdaed61509dd5b041f4f60608a1789a59d6eeae3adeee1b24749d74a22e7
- MD5 c4cd5c9588378901f1c4eb1787bd61af
- SHA1 72c27fa9b0f060f54c7ab70910fd8076aa924b98
- SHA512 3d74c0c0e73fc71cb207a82fca93533dff0d2188481f60f128bfccb83697a3f9978b6ce3fb3766de79915978ba2315d2edd5bb15b93959b515c5e5726d7ef46f
- SSDEEP 49152:mbTChxKCnFnQXBbrtgb/iQvu0UHOaepXA:m6hxvWbrtUTrUHOrpQ
- TLSH T1E585CC252790CD61F36FD07643E16E79B6B329213B33D896AE4864312BF2E1FE381195
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_c4cd5c9588378901f1c4eb1787bd61af_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_c4cd5c9588378901f1c4eb1787bd61af_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_c4cd5c9588378901f1c4eb1787bd61af_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.8MB
- SHA256 2acccdaed61509dd5b041f4f60608a1789a59d6eeae3adeee1b24749d74a22e7
- MD5 c4cd5c9588378901f1c4eb1787bd61af
- SHA1 72c27fa9b0f060f54c7ab70910fd8076aa924b98
- SHA512 3d74c0c0e73fc71cb207a82fca93533dff0d2188481f60f128bfccb83697a3f9978b6ce3fb3766de79915978ba2315d2edd5bb15b93959b515c5e5726d7ef46f
- SSDEEP 49152:mbTChxKCnFnQXBbrtgb/iQvu0UHOaepXA:m6hxvWbrtUTrUHOrpQ
- TLSH T1E585CC252790CD61F36FD07643E16E79B6B329213B33D896AE4864312BF2E1FE381195
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory