General
- Target 2026-07-23_7a73b474822955f857c1f708604b69f2_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.8MB
- Sample260723-v2f75a1zey
- SHA256 985523f3c201a61f862207587a4067aec9f6c503427592e508d9e295092cde54
- MD5 7a73b474822955f857c1f708604b69f2
- SHA1 2960453d35c2c666f3cc3aaadf2e579200e72544
- SHA512 22e62061d0e59f9f477a729b032ab7bff7b8e412d1673a5d72f99fd57e5a243dac706aa4da374c402d33698ef4ee464bf1d4287f5651925c3f1459030d2f4e62
- SSDEEP 24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UNS:mbTChxKCnFnQXBbrtgb/iQvu0UHOaep7
- TLSH T11985CC252790CD61F36FD07643E16E79B6B325213B33D896AE48A4312BF2E1FE381195
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_7a73b474822955f857c1f708604b69f2_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_7a73b474822955f857c1f708604b69f2_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_7a73b474822955f857c1f708604b69f2_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.8MB
- SHA256 985523f3c201a61f862207587a4067aec9f6c503427592e508d9e295092cde54
- MD5 7a73b474822955f857c1f708604b69f2
- SHA1 2960453d35c2c666f3cc3aaadf2e579200e72544
- SHA512 22e62061d0e59f9f477a729b032ab7bff7b8e412d1673a5d72f99fd57e5a243dac706aa4da374c402d33698ef4ee464bf1d4287f5651925c3f1459030d2f4e62
- SSDEEP 24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UNS:mbTChxKCnFnQXBbrtgb/iQvu0UHOaep7
- TLSH T11985CC252790CD61F36FD07643E16E79B6B325213B33D896AE48A4312BF2E1FE381195
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Adds Run key to start application
Drops file in System32 directory