General
- Target 2026-07-29_e3e4d799f25766742cf9a954b1c80250_coinminer_elex_wannacry
- Size 488KB
- Sample260729-vdflpabq2x
- SHA256 d016bb6bbb9a84064059f87c67abd1e04ae040722d5faafad1f38d6a588df325
- MD5 e3e4d799f25766742cf9a954b1c80250
- SHA1 efe73184b2b9377a53c261cb7f32e45bba508da7
- SHA512 197349c785227d79a864705f2a49b9a9138c5f8cca33933c5c3f53dee32aae325ce9b0bebc59a508e0364d39323a3fbaac5582530d62d11e175f60a5d156effe
- SSDEEP 12288:mAE9QKxE8H1J+Ey0z/8LXg/MSyie2l93yOVq:mxxE8H1J+Eya/aqMSyieS3Vq
- TLSH T1A7B4ADE33BC1CA59E6B011B2FD11AAE1F320AE715E18845A60597F6F19326F2C90DD1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_e3e4d799f25766742cf9a954b1c80250_coinminer_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_e3e4d799f25766742cf9a954b1c80250_coinminer_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_e3e4d799f25766742cf9a954b1c80250_coinminer_elex_wannacry
- Size 488KB
- SHA256 d016bb6bbb9a84064059f87c67abd1e04ae040722d5faafad1f38d6a588df325
- MD5 e3e4d799f25766742cf9a954b1c80250
- SHA1 efe73184b2b9377a53c261cb7f32e45bba508da7
- SHA512 197349c785227d79a864705f2a49b9a9138c5f8cca33933c5c3f53dee32aae325ce9b0bebc59a508e0364d39323a3fbaac5582530d62d11e175f60a5d156effe
- SSDEEP 12288:mAE9QKxE8H1J+Ey0z/8LXg/MSyie2l93yOVq:mxxE8H1J+Eya/aqMSyieS3Vq
- TLSH T1A7B4ADE33BC1CA59E6B011B2FD11AAE1F320AE715E18845A60597F6F19326F2C90DD1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.