General
- Target 2026-07-13_082d69f75ac6207f13f5224a97d80827_coinminer_elex_wannacry
- Size 488KB
- Sample260714-b9e59acv3q
- SHA256 3e6b5b7a69852943bc04496bb649583a39ae66d9f1ad535e7e1a36f0779aa6a0
- MD5 082d69f75ac6207f13f5224a97d80827
- SHA1 918bb913e44e16e160ec78db63a03fc3255c2802
- SHA512 f1974a723b15d0b3b46946ccbbe99237173d8cae80938b9a8453d10cef794ad32f3d2725b4e18144a01f6202cae1d54ca9371770047ee848a3f7ed6085033851
- SSDEEP 6144:mAE6tBYIBNQigHLMKOieP3ysStpDe7LhhHueau/1v3yaN9sOq:mAEm+hig4PSthe77N93yOVq
- TLSH T163B4BED23DFEE95ECBB1053D0D22B8A023271E90CCB44B46A598374D3D3D4A61E596BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-13_082d69f75ac6207f13f5224a97d80827_coinminer_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_082d69f75ac6207f13f5224a97d80827_coinminer_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_082d69f75ac6207f13f5224a97d80827_coinminer_elex_wannacry
- Size 488KB
- SHA256 3e6b5b7a69852943bc04496bb649583a39ae66d9f1ad535e7e1a36f0779aa6a0
- MD5 082d69f75ac6207f13f5224a97d80827
- SHA1 918bb913e44e16e160ec78db63a03fc3255c2802
- SHA512 f1974a723b15d0b3b46946ccbbe99237173d8cae80938b9a8453d10cef794ad32f3d2725b4e18144a01f6202cae1d54ca9371770047ee848a3f7ed6085033851
- SSDEEP 6144:mAE6tBYIBNQigHLMKOieP3ysStpDe7LhhHueau/1v3yaN9sOq:mAEm+hig4PSthe77N93yOVq
- TLSH T163B4BED23DFEE95ECBB1053D0D22B8A023271E90CCB44B46A598374D3D3D4A61E596BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.