General
- Target 2026-07-12_7969fe44794b510e05ab89e3bdd998c5_coinminer_darpapox_elex_jaku_nymaim_redline-stealer_rhadamanthys_wannacry
- Size 1.9MB
- Sample260712-vbr7psdw4n
- SHA256 4ff1cce229cb1c60a82262583fec7a3e2ba6a41f6f0d69fabf5dd154ecc76aea
- MD5 7969fe44794b510e05ab89e3bdd998c5
- SHA1 72e2ff89a48602156fd295e5e54d8b045059a342
- SHA512 fa96034f5cc7c381c4e427d1168fd2018cb9f175c206b09f8f2c0bf07aeef1853a9375c44c98d20e756df8758be26b843a2a1437c2046f487d696d13fa8f896e
- SSDEEP 49152:Zcoo7BbTChxKCnFnQXBbrtgb/iQvu0UHOaA:zo7B6hxvWbrtUTrUHOF
- TLSH T17F95EF112390CC21F39FC17283D5AE717AB766213733DC06AE4856312BF1E6BE796686
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_7969fe44794b510e05ab89e3bdd998c5_coinminer_darpapox_elex_jaku_nymaim_redline-stealer_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_7969fe44794b510e05ab89e3bdd998c5_coinminer_darpapox_elex_jaku_nymaim_redline-stealer_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_7969fe44794b510e05ab89e3bdd998c5_coinminer_darpapox_elex_jaku_nymaim_redline-stealer_rhadamanthys_wannacry
- Size 1.9MB
- SHA256 4ff1cce229cb1c60a82262583fec7a3e2ba6a41f6f0d69fabf5dd154ecc76aea
- MD5 7969fe44794b510e05ab89e3bdd998c5
- SHA1 72e2ff89a48602156fd295e5e54d8b045059a342
- SHA512 fa96034f5cc7c381c4e427d1168fd2018cb9f175c206b09f8f2c0bf07aeef1853a9375c44c98d20e756df8758be26b843a2a1437c2046f487d696d13fa8f896e
- SSDEEP 49152:Zcoo7BbTChxKCnFnQXBbrtgb/iQvu0UHOaA:zo7B6hxvWbrtUTrUHOF
- TLSH T17F95EF112390CC21F39FC17283D5AE717AB766213733DC06AE4856312BF1E6BE796686
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory