General
- Target 2026-07-28_1fc41bf22d5803435c260f85a85cb105_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.7MB
- Sample260728-3e1bgsbr2y
- SHA256 af99f25e701f02c370eff6410018cd10de111f4b11794c971f7c6d5030f7422e
- MD5 1fc41bf22d5803435c260f85a85cb105
- SHA1 b5588e6583d2b45d32d9659590e5f9e2642d8e28
- SHA512 6a78a6609efb154926bf64c059aed0ae52fd63e857591cad1deca238d7bae85aafd8a5433c0666c873a7dfa4f12b8372bf224ecdb1438a1cec1216d4f87945ab
- SSDEEP 24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UNy:mbTChxKCnFnQXBbrtgb/iQvu0UHOz
- TLSH T18085DE252790CCA1F36FC07683E56E79B5B329213733D8966E4855312BF2E2FE381196
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_1fc41bf22d5803435c260f85a85cb105_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_1fc41bf22d5803435c260f85a85cb105_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_1fc41bf22d5803435c260f85a85cb105_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.7MB
- SHA256 af99f25e701f02c370eff6410018cd10de111f4b11794c971f7c6d5030f7422e
- MD5 1fc41bf22d5803435c260f85a85cb105
- SHA1 b5588e6583d2b45d32d9659590e5f9e2642d8e28
- SHA512 6a78a6609efb154926bf64c059aed0ae52fd63e857591cad1deca238d7bae85aafd8a5433c0666c873a7dfa4f12b8372bf224ecdb1438a1cec1216d4f87945ab
- SSDEEP 24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UNy:mbTChxKCnFnQXBbrtgb/iQvu0UHOz
- TLSH T18085DE252790CCA1F36FC07683E56E79B5B329213733D8966E4855312BF2E2FE381196
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory