General
- Target 2026-07-31_f16aa8082e627afe43edaa9d238992dc_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.7MB
- Sample260731-mtq4csgh88
- SHA256 ebabc17748ee6e3cca362c07b84e2a9fc5dd2cd81a17c4f250b7363f30fbd1ab
- MD5 f16aa8082e627afe43edaa9d238992dc
- SHA1 b94d907607fafede247c5dcc10b08a497c6f931a
- SHA512 3fb202123b858f69a8a9227a98ad9a507abecc243955b5ecad4f15524759b3b8b675c0401cabc2be5f867289d51a82d4662f9cc91106e393e409c78f478c69c1
- SSDEEP 24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UNB:mbTChxKCnFnQXBbrtgb/iQvu0UHO2
- TLSH T15785F0252790CDA1F36FC07283E56E79B5B329213733D8866E4851312BF2E2FE781196
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_f16aa8082e627afe43edaa9d238992dc_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_f16aa8082e627afe43edaa9d238992dc_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_f16aa8082e627afe43edaa9d238992dc_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.7MB
- SHA256 ebabc17748ee6e3cca362c07b84e2a9fc5dd2cd81a17c4f250b7363f30fbd1ab
- MD5 f16aa8082e627afe43edaa9d238992dc
- SHA1 b94d907607fafede247c5dcc10b08a497c6f931a
- SHA512 3fb202123b858f69a8a9227a98ad9a507abecc243955b5ecad4f15524759b3b8b675c0401cabc2be5f867289d51a82d4662f9cc91106e393e409c78f478c69c1
- SSDEEP 24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UNB:mbTChxKCnFnQXBbrtgb/iQvu0UHO2
- TLSH T15785F0252790CDA1F36FC07283E56E79B5B329213733D8866E4851312BF2E2FE781196
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory