General
- Target 2026-07-16_305255f9c5116459563294a94c31a844_coinminer_elex_upatre_wannacry
- Size 29KB
- Sample260716-dfv1qaby7j
- SHA256 2acb4d06b0dd4556d8d878acfe67e53f4a74a30615180399fbe007d9ce39409d
- MD5 305255f9c5116459563294a94c31a844
- SHA1 cd082e0350c0eb838d1daaaf59c659098d9b8eab
- SHA512 ee8f3d918d03144c2154404362b351172b0b0ac6520c518de0d810ddf0481beb2c9c492043779ad3037c6b561668a463cf30cf06409d6654db9770eadcbe8050
- SSDEEP 384:LLz3qWcd5DUVQQ4oM+JKcMef9YlWRhQIUY/FYHZxgO8vixamynIsf3sTF:Xz3qWc7Re1Jen6hpFwxgOTE5jf8Z
- TLSH T125D209DEDA850989C8863F3B92FA5B0091189E1D87A456EBE9A4FC438D7F3C14C31D9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-16_305255f9c5116459563294a94c31a844_coinminer_elex_upatre_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-16_305255f9c5116459563294a94c31a844_coinminer_elex_upatre_wannacry
- Size 29KB
- SHA256 2acb4d06b0dd4556d8d878acfe67e53f4a74a30615180399fbe007d9ce39409d
- MD5 305255f9c5116459563294a94c31a844
- SHA1 cd082e0350c0eb838d1daaaf59c659098d9b8eab
- SHA512 ee8f3d918d03144c2154404362b351172b0b0ac6520c518de0d810ddf0481beb2c9c492043779ad3037c6b561668a463cf30cf06409d6654db9770eadcbe8050
- SSDEEP 384:LLz3qWcd5DUVQQ4oM+JKcMef9YlWRhQIUY/FYHZxgO8vixamynIsf3sTF:Xz3qWc7Re1Jen6hpFwxgOTE5jf8Z
- TLSH T125D209DEDA850989C8863F3B92FA5B0091189E1D87A456EBE9A4FC438D7F3C14C31D9C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE