General
- Target 2026-07-20_f2a7bc6e7d173fab3e9fd9ad484c3a3f_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 990KB
- Sample260720-cvl6pacv6q
- SHA256 988037574b7796ed71f5692152ecf3c66ae49997ac93a85e9d33de16038e67e0
- MD5 f2a7bc6e7d173fab3e9fd9ad484c3a3f
- SHA1 609e5bf4c7e5a56626c011e3c5a0d4485d3a8f24
- SHA512 9c42582b8594e379cc9286745ebb0a0677c4bb3268538d8484bd2d6269b117936c2321f2e03e5a018e39fd95b358335d9a3f58b7e33b7d02ef06679af7752b48
- SSDEEP 24576:1GRzatThRiVNbLGJv6plFh9iGa2oMYMgdsHGePD:o8TjFJspDLoVMgdkLPD
- TLSH T1D025EF192B80CDA1F36FC07296D06E34B6772A203733CD4A6E4895391BF2E5FE792156
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_f2a7bc6e7d173fab3e9fd9ad484c3a3f_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_f2a7bc6e7d173fab3e9fd9ad484c3a3f_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_f2a7bc6e7d173fab3e9fd9ad484c3a3f_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 990KB
- SHA256 988037574b7796ed71f5692152ecf3c66ae49997ac93a85e9d33de16038e67e0
- MD5 f2a7bc6e7d173fab3e9fd9ad484c3a3f
- SHA1 609e5bf4c7e5a56626c011e3c5a0d4485d3a8f24
- SHA512 9c42582b8594e379cc9286745ebb0a0677c4bb3268538d8484bd2d6269b117936c2321f2e03e5a018e39fd95b358335d9a3f58b7e33b7d02ef06679af7752b48
- SSDEEP 24576:1GRzatThRiVNbLGJv6plFh9iGa2oMYMgdsHGePD:o8TjFJspDLoVMgdkLPD
- TLSH T1D025EF192B80CDA1F36FC07296D06E34B6772A203733CD4A6E4895391BF2E5FE792156
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application