General
- Target 2026-07-13_2255c19ae456b8bef15a030f844ae591_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.7MB
- Sample260714-b4g3naev8y
- SHA256 655c2e082cc4754d4b8c702949c754e4f14dabbe0474e9d99582fea5a40a00b2
- MD5 2255c19ae456b8bef15a030f844ae591
- SHA1 0eac80755884d710da1ab97e8897150b26402c60
- SHA512 580e43012251b77c20942997aca42d28bb1501e01bb663a1a0959d8cbb2a66cc83f4a00de12b8f12ea9fa0bf72c32c60497dfca09408bfbc307a7051078d3369
- SSDEEP 24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UNO:mbTChxKCnFnQXBbrtgb/iQvu0UHOr
- TLSH T14485EF252790CD61F36FC07683E16E79B5B329213733D886AE4855312BF2E2FE781196
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-13_2255c19ae456b8bef15a030f844ae591_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_2255c19ae456b8bef15a030f844ae591_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_2255c19ae456b8bef15a030f844ae591_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.7MB
- SHA256 655c2e082cc4754d4b8c702949c754e4f14dabbe0474e9d99582fea5a40a00b2
- MD5 2255c19ae456b8bef15a030f844ae591
- SHA1 0eac80755884d710da1ab97e8897150b26402c60
- SHA512 580e43012251b77c20942997aca42d28bb1501e01bb663a1a0959d8cbb2a66cc83f4a00de12b8f12ea9fa0bf72c32c60497dfca09408bfbc307a7051078d3369
- SSDEEP 24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UNO:mbTChxKCnFnQXBbrtgb/iQvu0UHOr
- TLSH T14485EF252790CD61F36FC07683E16E79B5B329213733D886AE4855312BF2E2FE781196
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Adds Run key to start application
Drops file in System32 directory