General
- Target 2026-07-21_528176d65cf29fff438bf2a35d147d07_coinminer_elex_gh0st-rat_nitol_wannacry
- Size 47KB
- Sample260721-qtwkmaxbma
- SHA256 cacdfb79d8d8d964dea925dc7fe6211d9746b0225d391cee991f807d4523b21e
- MD5 528176d65cf29fff438bf2a35d147d07
- SHA1 30034f3290963f7be3cd7d5878a859168c3a551c
- SHA512 fda9a00b2b477393ff3e72e72660d7de1f304e80c2436e63300cb0cfb8afccbee93fdb7cd754caccf88b84852569acaf44297eefb2903d27219a9e517ab9755c
- SSDEEP 768:yb4hrd8dGKrod+0QXriKENi/I4PqEW92pJHFs2OjgT5:ybRqd4biKQ45W9yog
- TLSH T101232B03A7B98421D5B7ABB8687423455AFBBD761C7AC15EE7405C4E7C39E089A3032F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-21_528176d65cf29fff438bf2a35d147d07_coinminer_elex_gh0st-rat_nitol_wannacry.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_528176d65cf29fff438bf2a35d147d07_coinminer_elex_gh0st-rat_nitol_wannacry
- Size 47KB
- SHA256 cacdfb79d8d8d964dea925dc7fe6211d9746b0225d391cee991f807d4523b21e
- MD5 528176d65cf29fff438bf2a35d147d07
- SHA1 30034f3290963f7be3cd7d5878a859168c3a551c
- SHA512 fda9a00b2b477393ff3e72e72660d7de1f304e80c2436e63300cb0cfb8afccbee93fdb7cd754caccf88b84852569acaf44297eefb2903d27219a9e517ab9755c
- SSDEEP 768:yb4hrd8dGKrod+0QXriKENi/I4PqEW92pJHFs2OjgT5:ybRqd4biKQ45W9yog
- TLSH T101232B03A7B98421D5B7ABB8687423455AFBBD761C7AC15EE7405C4E7C39E089A3032F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Windows executables referencing non-Windows User-Agents
-
UPX dump on OEP (original entry point)