General
- Target 2026-07-22_0d195cbdab6910a8c3296343e12b9f9a_coinminer_darpapox_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.9MB
- Sample260722-1bbgvavfqd
- SHA256 abb7ead0bf48fd497513d845074e8decee38ed98ba963a0d6aa1f381f46ce766
- MD5 0d195cbdab6910a8c3296343e12b9f9a
- SHA1 716e7ef031fff326979debd0d1e787b42078bee8
- SHA512 365411cd1b94b7826edc2848b283f6ca5fea5d75b2ecf305ab066acc5f23406b6a5b09ca0b96c6d695121f2bb1fa2542a75f019469acaa0115239a1521599c0c
- SSDEEP 49152:BIYTTOxbTChxKCnFnQXBbrtgb/iQvu0UHOaL:SYTTOx6hxvWbrtUTrUHO8
- TLSH T1E69501252790CC60E3AFC07293E16F7AB6B328213773DD96AB4854316BF2E1EE781155
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_0d195cbdab6910a8c3296343e12b9f9a_coinminer_darpapox_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_0d195cbdab6910a8c3296343e12b9f9a_coinminer_darpapox_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_0d195cbdab6910a8c3296343e12b9f9a_coinminer_darpapox_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.9MB
- SHA256 abb7ead0bf48fd497513d845074e8decee38ed98ba963a0d6aa1f381f46ce766
- MD5 0d195cbdab6910a8c3296343e12b9f9a
- SHA1 716e7ef031fff326979debd0d1e787b42078bee8
- SHA512 365411cd1b94b7826edc2848b283f6ca5fea5d75b2ecf305ab066acc5f23406b6a5b09ca0b96c6d695121f2bb1fa2542a75f019469acaa0115239a1521599c0c
- SSDEEP 49152:BIYTTOxbTChxKCnFnQXBbrtgb/iQvu0UHOaL:SYTTOx6hxvWbrtUTrUHO8
- TLSH T1E69501252790CC60E3AFC07293E16F7AB6B328213773DD96AB4854316BF2E1EE781155
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory