General
- Target 2026-07-18_841ae7bea4ff79660d6c147cfd0070bb_coinminer_elex_upatre_wannacry
- Size 29KB
- Sample260718-h7ev2ab14j
- SHA256 7458b6481f7568233338962f3cf9f9f4d726172d97d2a8056af3a833427ea627
- MD5 841ae7bea4ff79660d6c147cfd0070bb
- SHA1 186294e8f7c87ce2b5fd43221ced2362bd36ab37
- SHA512 00a0acca28581126b1a6b501acb0cea280c6a0ccf8fd8ba8b94d0c49071b76c5671e948deb26514647a65144a32be189f4a2e1cd3acb6c0af251290cfca27738
- SSDEEP 384:LLz3qWcd5DUVQQ4oM+JKcMef9YlWRhQIUY/FYHZxgO8vixamynIsfxsTM:Xz3qWc7Re1Jen6hpFwxgOTE5jfqg
- TLSH T109D2F8DED9864989C8853F3B92FE5B0091189E1D87A45AEBE9A4FC438D7F2C14C31D9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-18_841ae7bea4ff79660d6c147cfd0070bb_coinminer_elex_upatre_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_841ae7bea4ff79660d6c147cfd0070bb_coinminer_elex_upatre_wannacry
- Size 29KB
- SHA256 7458b6481f7568233338962f3cf9f9f4d726172d97d2a8056af3a833427ea627
- MD5 841ae7bea4ff79660d6c147cfd0070bb
- SHA1 186294e8f7c87ce2b5fd43221ced2362bd36ab37
- SHA512 00a0acca28581126b1a6b501acb0cea280c6a0ccf8fd8ba8b94d0c49071b76c5671e948deb26514647a65144a32be189f4a2e1cd3acb6c0af251290cfca27738
- SSDEEP 384:LLz3qWcd5DUVQQ4oM+JKcMef9YlWRhQIUY/FYHZxgO8vixamynIsfxsTM:Xz3qWc7Re1Jen6hpFwxgOTE5jfqg
- TLSH T109D2F8DED9864989C8853F3B92FE5B0091189E1D87A45AEBE9A4FC438D7F2C14C31D9C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE