General
- Target 2026-07-16_ae1645e230f59bf33c980008bc9004c1_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.0MB
- Sample260716-ngd4psft8v
- SHA256 c67058026ae3e9f7489d7aea7fd0da8d2714d9c79c50e72d01b4ab48e44bc521
- MD5 ae1645e230f59bf33c980008bc9004c1
- SHA1 f63dfe9f26859a14b5ad29c91a0e4a8dd67dc0ef
- SHA512 30a6ef1f9ccd57e91203bac5b1704a648772d2124e2fb9907b4899e8d0f377cabef44c309c79fc4b334725c937c07270d1058f2c32b54f62006c5e765187af46
- SSDEEP 24576:NGRzatThRiVNbLGJv6plFh9iGa2oMYMgdsHGeb:w8TjFJspDLoVMgdkLb
- TLSH T14535F0052790CD61F3AFC07286E06E34B6772A203733CD4A6E4896791BF1E5FE7A1256
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-16_ae1645e230f59bf33c980008bc9004c1_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-16_ae1645e230f59bf33c980008bc9004c1_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-16_ae1645e230f59bf33c980008bc9004c1_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.0MB
- SHA256 c67058026ae3e9f7489d7aea7fd0da8d2714d9c79c50e72d01b4ab48e44bc521
- MD5 ae1645e230f59bf33c980008bc9004c1
- SHA1 f63dfe9f26859a14b5ad29c91a0e4a8dd67dc0ef
- SHA512 30a6ef1f9ccd57e91203bac5b1704a648772d2124e2fb9907b4899e8d0f377cabef44c309c79fc4b334725c937c07270d1058f2c32b54f62006c5e765187af46
- SSDEEP 24576:NGRzatThRiVNbLGJv6plFh9iGa2oMYMgdsHGeb:w8TjFJspDLoVMgdkLb
- TLSH T14535F0052790CD61F3AFC07286E06E34B6772A203733CD4A6E4896791BF1E5FE7A1256
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application