General
- Target 2026-07-17_ca4e7d2dd2780c51c6cf379e5de3ffce_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.7MB
- Sample260718-cjebpsgv9s
- SHA256 356f9a533ea26ea01d2c46ea7820fc52c6f4d038e32e4ee557b38ccab57be0bf
- MD5 ca4e7d2dd2780c51c6cf379e5de3ffce
- SHA1 8b05da22e4dfc76081e2cea20531fd6f136c51cc
- SHA512 5795933c21a0b162fa0b02c2f4446411f66ef75fe7c56786d20d679cf4e33062638ba29e8c667fc452c485d05ed567eb7968136522004e5118de8cff464def54
- SSDEEP 24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UNZ:mbTChxKCnFnQXBbrtgb/iQvu0UHOEAC
- TLSH T13585EF152790CDA1F36FC07683D56E79B5B329213B33D886AE4854312BF2E2FE781195
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_ca4e7d2dd2780c51c6cf379e5de3ffce_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_ca4e7d2dd2780c51c6cf379e5de3ffce_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_ca4e7d2dd2780c51c6cf379e5de3ffce_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.7MB
- SHA256 356f9a533ea26ea01d2c46ea7820fc52c6f4d038e32e4ee557b38ccab57be0bf
- MD5 ca4e7d2dd2780c51c6cf379e5de3ffce
- SHA1 8b05da22e4dfc76081e2cea20531fd6f136c51cc
- SHA512 5795933c21a0b162fa0b02c2f4446411f66ef75fe7c56786d20d679cf4e33062638ba29e8c667fc452c485d05ed567eb7968136522004e5118de8cff464def54
- SSDEEP 24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UNZ:mbTChxKCnFnQXBbrtgb/iQvu0UHOEAC
- TLSH T13585EF152790CDA1F36FC07683D56E79B5B329213B33D886AE4854312BF2E2FE781195
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory