General
- Target 2026-07-22_ffbc0f012c5f5e0014b0addabb5d08af_coinminer_elex_gh0st-rat_nitol_wannacry
- Size 52KB
- Sample260722-2y312sssfs
- SHA256 9e7f0cfc5430a679c46e76f9e3fbced67d255918ffcac08efe7c5f2c95e2dcee
- MD5 ffbc0f012c5f5e0014b0addabb5d08af
- SHA1 2c4b55608cd9b07713cfaa72d54a0bf6a7b5fde0
- SHA512 c56926b43f2715de656c8950e2873c6fbe6f590a7e097132849c347c13231b2848de8e393a616fca7e1d1baf1c938a4407b4472817dbad9b18c6f4a67f8b20c9
- SSDEEP 768:Zo9k3vwAj2pa7Wep3uwCs+uXsPq3HWe2ARJV1PaFJK:0kfQgWsEssGWefO
- TLSH T113332847AAB84022D0B3E5BC547547144BF77CB66C7AC249EB515C4EAC39E08BAB032F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-22_ffbc0f012c5f5e0014b0addabb5d08af_coinminer_elex_gh0st-rat_nitol_wannacry.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_ffbc0f012c5f5e0014b0addabb5d08af_coinminer_elex_gh0st-rat_nitol_wannacry
- Size 52KB
- SHA256 9e7f0cfc5430a679c46e76f9e3fbced67d255918ffcac08efe7c5f2c95e2dcee
- MD5 ffbc0f012c5f5e0014b0addabb5d08af
- SHA1 2c4b55608cd9b07713cfaa72d54a0bf6a7b5fde0
- SHA512 c56926b43f2715de656c8950e2873c6fbe6f590a7e097132849c347c13231b2848de8e393a616fca7e1d1baf1c938a4407b4472817dbad9b18c6f4a67f8b20c9
- SSDEEP 768:Zo9k3vwAj2pa7Wep3uwCs+uXsPq3HWe2ARJV1PaFJK:0kfQgWsEssGWefO
- TLSH T113332847AAB84022D0B3E5BC547547144BF77CB66C7AC249EB515C4EAC39E08BAB032F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Windows executables referencing non-Windows User-Agents
-
UPX dump on OEP (original entry point)