General
- Target 2026-07-28_6080c0ccc27e8ebbfaa49ae41cadc71a_coinminer_elex_upatre_wannacry
- Size 29KB
- Sample260728-thephsck7z
- SHA256 cc304a2cf529c9911cb2f2e50d97f060914d43ace38ca1b97b8436e98f1a0889
- MD5 6080c0ccc27e8ebbfaa49ae41cadc71a
- SHA1 0ef41c8ec0b648ab3f72a54a76a78f700e25f1c5
- SHA512 19454d5dbd3aace222a1b0327e5c22c9321d130315c8cd10b3c616bcf281e7630bcd107ed492043282f9869ab17f8b99f6e35b14af3f2b4f231f5e39a64c415e
- SSDEEP 384:LLz3qWcd5DUVQQ4oM+JKcMef9YlWRhQIUY/FYHZxgO8vixamynIsfbsT9v:Xz3qWc7Re1Jen6hpFwxgOTE5jf4B
- TLSH T168D2F8DED9864989C8853F3B92FA5B0091189E1D87A45AEBE9A4FC438D7F2C14C31C9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-28_6080c0ccc27e8ebbfaa49ae41cadc71a_coinminer_elex_upatre_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_6080c0ccc27e8ebbfaa49ae41cadc71a_coinminer_elex_upatre_wannacry
- Size 29KB
- SHA256 cc304a2cf529c9911cb2f2e50d97f060914d43ace38ca1b97b8436e98f1a0889
- MD5 6080c0ccc27e8ebbfaa49ae41cadc71a
- SHA1 0ef41c8ec0b648ab3f72a54a76a78f700e25f1c5
- SHA512 19454d5dbd3aace222a1b0327e5c22c9321d130315c8cd10b3c616bcf281e7630bcd107ed492043282f9869ab17f8b99f6e35b14af3f2b4f231f5e39a64c415e
- SSDEEP 384:LLz3qWcd5DUVQQ4oM+JKcMef9YlWRhQIUY/FYHZxgO8vixamynIsfbsT9v:Xz3qWc7Re1Jen6hpFwxgOTE5jf4B
- TLSH T168D2F8DED9864989C8853F3B92FA5B0091189E1D87A45AEBE9A4FC438D7F2C14C31C9C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE