General
- Target 2026-07-15_c20e28ef42a3adfdbdfc113f79f49d13_coinminer_elex_wannacry
- Size 488KB
- Sample260715-t42feact6s
- SHA256 7cd1b08983c80ea12e2f24a9c4ce0fac932f3a7646215831b045561c9f612e4a
- MD5 c20e28ef42a3adfdbdfc113f79f49d13
- SHA1 0c11c640e089f26011c29f734f66fcbe90b13285
- SHA512 baaf5d231c435d25bcc7205b912323e54a4797ef53d31a9959543a8642a6c58ab9505fbb4467e269dca1804cff224b606d65a171edc31fbc99863fa502b42d3e
- SSDEEP 6144:mAEWFxb+sex5eesaD+a1jTMQ3qbtau/1v3yaN9sOq:mAEWFxz4D+Cabx93yOVq
- TLSH T164B4BD68B624F42DC9E00371DC9F9AB52A31AF2DCF55D916A5C037DC6A3429EEB4E00C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_c20e28ef42a3adfdbdfc113f79f49d13_coinminer_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_c20e28ef42a3adfdbdfc113f79f49d13_coinminer_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_c20e28ef42a3adfdbdfc113f79f49d13_coinminer_elex_wannacry
- Size 488KB
- SHA256 7cd1b08983c80ea12e2f24a9c4ce0fac932f3a7646215831b045561c9f612e4a
- MD5 c20e28ef42a3adfdbdfc113f79f49d13
- SHA1 0c11c640e089f26011c29f734f66fcbe90b13285
- SHA512 baaf5d231c435d25bcc7205b912323e54a4797ef53d31a9959543a8642a6c58ab9505fbb4467e269dca1804cff224b606d65a171edc31fbc99863fa502b42d3e
- SSDEEP 6144:mAEWFxb+sex5eesaD+a1jTMQ3qbtau/1v3yaN9sOq:mAEWFxz4D+Cabx93yOVq
- TLSH T164B4BD68B624F42DC9E00371DC9F9AB52A31AF2DCF55D916A5C037DC6A3429EEB4E00C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.