General
- Target 2026-07-17_9e420831a904ceaa5bc08c9da08fa516_coinminer_elex_wannacry
- Size 488KB
- Sample260717-1mryzaex2p
- SHA256 6efe707e21f05f4cde35f27ae0562524473d489b7f56951793dd2d6690153fc9
- MD5 9e420831a904ceaa5bc08c9da08fa516
- SHA1 76eadc6c9e951e872b7d95d6197d4c9221069a7f
- SHA512 a23d68adebca4cca794a974c91e0216ee9a97755839c62b868078264060f6d131d6a3d4600f0a7a47ecc7a8b49f65707194685ce1ceca14aa2d4b3f2e26ec547
- SSDEEP 6144:mAEh8c3iiIekWWckFU3iU2moeRfzau/1v3yaN9sOq:mAEODekWWljkxt93yOVq
- TLSH T117B4CF667A06C6DCEAE026F05D6FCDF8E329AD31EC50D70FAC103BAC5A31297C641659
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_9e420831a904ceaa5bc08c9da08fa516_coinminer_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_9e420831a904ceaa5bc08c9da08fa516_coinminer_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_9e420831a904ceaa5bc08c9da08fa516_coinminer_elex_wannacry
- Size 488KB
- SHA256 6efe707e21f05f4cde35f27ae0562524473d489b7f56951793dd2d6690153fc9
- MD5 9e420831a904ceaa5bc08c9da08fa516
- SHA1 76eadc6c9e951e872b7d95d6197d4c9221069a7f
- SHA512 a23d68adebca4cca794a974c91e0216ee9a97755839c62b868078264060f6d131d6a3d4600f0a7a47ecc7a8b49f65707194685ce1ceca14aa2d4b3f2e26ec547
- SSDEEP 6144:mAEh8c3iiIekWWckFU3iU2moeRfzau/1v3yaN9sOq:mAEODekWWljkxt93yOVq
- TLSH T117B4CF667A06C6DCEAE026F05D6FCDF8E329AD31EC50D70FAC103BAC5A31297C641659
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.