General
- Target 2026-07-11_2d8f2df53d700b267e095932ca6f2051_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.4MB
- Sample260711-q1p2esdx31
- SHA256 f847edca829c753b5e04638b62b00ba5edd356f9f5999544ef2210f69d3f4974
- MD5 2d8f2df53d700b267e095932ca6f2051
- SHA1 51c5b22525e1fa810292c938140c0f19ceecc887
- SHA512 ee5473e311e6f4d76e4d1428a8c60d7ec53a0e2649d81967f3c58017c16656810355d73c5ce0cf09827adce41de57d81e0e61bcbc85a7ddc5a8172a0a997c767
- SSDEEP 24576:vkXye2GRzatThRiVNbLGJv6plFh9iGa2oMYMgdsHGr:5e38TjFJspDLoVMgdkM
- TLSH T11A65E1217280C876F66FC13149F95B79B1776A10172388F797C89D391EF29AAEF2110E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_2d8f2df53d700b267e095932ca6f2051_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_2d8f2df53d700b267e095932ca6f2051_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_2d8f2df53d700b267e095932ca6f2051_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.4MB
- SHA256 f847edca829c753b5e04638b62b00ba5edd356f9f5999544ef2210f69d3f4974
- MD5 2d8f2df53d700b267e095932ca6f2051
- SHA1 51c5b22525e1fa810292c938140c0f19ceecc887
- SHA512 ee5473e311e6f4d76e4d1428a8c60d7ec53a0e2649d81967f3c58017c16656810355d73c5ce0cf09827adce41de57d81e0e61bcbc85a7ddc5a8172a0a997c767
- SSDEEP 24576:vkXye2GRzatThRiVNbLGJv6plFh9iGa2oMYMgdsHGr:5e38TjFJspDLoVMgdkM
- TLSH T11A65E1217280C876F66FC13149F95B79B1776A10172388F797C89D391EF29AAEF2110E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application