General
- Target 2026-07-29_81d11fb5c0f1569beb42950c618c4d80_coinminer_elex_wannacry
- Size 488KB
- Sample260729-y2b5ysec67
- SHA256 a58f3d0b57238743e7e36db35e6688dc5e5da7066b6995ed4cca8399b5847dd2
- MD5 81d11fb5c0f1569beb42950c618c4d80
- SHA1 37b03d40ee0b3150df87198a06b340f6c773da11
- SHA512 8741c561085de7fdea9269dab190280968907ee733511e877ea95d7af9284af83578a62ca53c45b9d5387e730248a5f22fb96720d2c0ef5778d56043e6a4e81d
- SSDEEP 6144:mAE7wnFuzony1phcYwpfjklePdMnau/1v3yaN9sOq:mAE7JeyThzwx+eFMP93yOVq
- TLSH T13CB4BE65750AD38DCAD21E726DA8C7AD3A2E5CED0D2DD66B2DE57BCC34F029029003E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_81d11fb5c0f1569beb42950c618c4d80_coinminer_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_81d11fb5c0f1569beb42950c618c4d80_coinminer_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_81d11fb5c0f1569beb42950c618c4d80_coinminer_elex_wannacry
- Size 488KB
- SHA256 a58f3d0b57238743e7e36db35e6688dc5e5da7066b6995ed4cca8399b5847dd2
- MD5 81d11fb5c0f1569beb42950c618c4d80
- SHA1 37b03d40ee0b3150df87198a06b340f6c773da11
- SHA512 8741c561085de7fdea9269dab190280968907ee733511e877ea95d7af9284af83578a62ca53c45b9d5387e730248a5f22fb96720d2c0ef5778d56043e6a4e81d
- SSDEEP 6144:mAE7wnFuzony1phcYwpfjklePdMnau/1v3yaN9sOq:mAE7JeyThzwx+eFMP93yOVq
- TLSH T13CB4BE65750AD38DCAD21E726DA8C7AD3A2E5CED0D2DD66B2DE57BCC34F029029003E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.