General
- Target 2026-07-31_4c7ac4898d796b96d083e236285d028d_coinminer_elex_upatre_wannacry
- Size 29KB
- Sample260731-gh9tfabk41
- SHA256 60afa9eb5896d4bb44b56246ca2c6cd882ed682719c0b28eb812c4743bd0957e
- MD5 4c7ac4898d796b96d083e236285d028d
- SHA1 852dc37203bbcc62500ac8569f11948e9e5541e8
- SHA512 6aacc99ef5201d369f3d1ae0ce14260a149eae7aa8a74a0fda7abb2af2ae1ebeab7d4f93af98a7d98e62805fda5d4a4629b60862691fb57f9441bd90c7a38e4e
- SSDEEP 384:LLz3qWcd5DUVQQ4oM+JKcMef9YlWRhQIUY/FYHZxgO8vixamynIsfRsT4:Xz3qWc7Re1Jen6hpFwxgOTE5jfKE
- TLSH T197D2F8DED9864989C8853F3B92FA5B1091189E1D87A45AE7E9A8FC438D7E2C14C31C9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-31_4c7ac4898d796b96d083e236285d028d_coinminer_elex_upatre_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_4c7ac4898d796b96d083e236285d028d_coinminer_elex_upatre_wannacry
- Size 29KB
- SHA256 60afa9eb5896d4bb44b56246ca2c6cd882ed682719c0b28eb812c4743bd0957e
- MD5 4c7ac4898d796b96d083e236285d028d
- SHA1 852dc37203bbcc62500ac8569f11948e9e5541e8
- SHA512 6aacc99ef5201d369f3d1ae0ce14260a149eae7aa8a74a0fda7abb2af2ae1ebeab7d4f93af98a7d98e62805fda5d4a4629b60862691fb57f9441bd90c7a38e4e
- SSDEEP 384:LLz3qWcd5DUVQQ4oM+JKcMef9YlWRhQIUY/FYHZxgO8vixamynIsfRsT4:Xz3qWc7Re1Jen6hpFwxgOTE5jfKE
- TLSH T197D2F8DED9864989C8853F3B92FA5B1091189E1D87A45AE7E9A8FC438D7E2C14C31C9C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE