General
- Target 2026-07-29_958a5f49f4d7a4e999e59ad0000986f7_coinminer_elex_wannacry
- Size 488KB
- Sample260729-vyng2a1tht
- SHA256 4c9563781c38f862f2b2ab17efc84e191136957dae0d50bfb95f8e193139c8f6
- MD5 958a5f49f4d7a4e999e59ad0000986f7
- SHA1 35393d82e48cab218a8ce47680bdac1804466520
- SHA512 8a956278edc88a52e3365ced08a3d4f0d7f85139a6f33b462718eb7548c644124cfdacba409a727723d2adb45203e3e2fb5ffeac2da0f85180cd3a4e3583aeef
- SSDEEP 6144:mAE1Dr+lYf2QPwQnb/92Pls7iT9Lau/1v3yaN9sOq:mAE1X0Yf3Pw8blas7S93yOVq
- TLSH T13BB4BE71688AF50DE3EE04B12E78D3E7A5355FB28CA189E36E25BBCC1F342A138D5550
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_958a5f49f4d7a4e999e59ad0000986f7_coinminer_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_958a5f49f4d7a4e999e59ad0000986f7_coinminer_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_958a5f49f4d7a4e999e59ad0000986f7_coinminer_elex_wannacry
- Size 488KB
- SHA256 4c9563781c38f862f2b2ab17efc84e191136957dae0d50bfb95f8e193139c8f6
- MD5 958a5f49f4d7a4e999e59ad0000986f7
- SHA1 35393d82e48cab218a8ce47680bdac1804466520
- SHA512 8a956278edc88a52e3365ced08a3d4f0d7f85139a6f33b462718eb7548c644124cfdacba409a727723d2adb45203e3e2fb5ffeac2da0f85180cd3a4e3583aeef
- SSDEEP 6144:mAE1Dr+lYf2QPwQnb/92Pls7iT9Lau/1v3yaN9sOq:mAE1X0Yf3Pw8blas7S93yOVq
- TLSH T13BB4BE71688AF50DE3EE04B12E78D3E7A5355FB28CA189E36E25BBCC1F342A138D5550
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.