General
- Target 2026-07-31_df8d88df953e787810ecd05e9fa446a9_coinminer_elex_wannacry
- Size 488KB
- Sample260731-txb7yabp4y
- SHA256 b40cfc35f6350bd7c15331a6588c93c8c6f294d235e010a958684da77378257a
- MD5 df8d88df953e787810ecd05e9fa446a9
- SHA1 8ad374d02632e73efe5c985dd7605ff900888f93
- SHA512 5b0fdc29d50b31ade688c3920b00b1a57c60357ca2d2911d0357d62e21f26f8c287b2048b6ccb72945ddbf560fd4386c8d8bb4ca1780f4716360f6b491f5ac15
- SSDEEP 6144:mAELI/4LlZ3cCFW34z/d2eSLBdBZeynO6au/1v3yaN9sOq:mAEE4nMAvzlYLqeL93yOVq
- TLSH T14BB49C52F93EBC0DF7A8517EBD6895A0226C7C017F09D9B665D8FF8D81385A26EC0207
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_df8d88df953e787810ecd05e9fa446a9_coinminer_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_df8d88df953e787810ecd05e9fa446a9_coinminer_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_df8d88df953e787810ecd05e9fa446a9_coinminer_elex_wannacry
- Size 488KB
- SHA256 b40cfc35f6350bd7c15331a6588c93c8c6f294d235e010a958684da77378257a
- MD5 df8d88df953e787810ecd05e9fa446a9
- SHA1 8ad374d02632e73efe5c985dd7605ff900888f93
- SHA512 5b0fdc29d50b31ade688c3920b00b1a57c60357ca2d2911d0357d62e21f26f8c287b2048b6ccb72945ddbf560fd4386c8d8bb4ca1780f4716360f6b491f5ac15
- SSDEEP 6144:mAELI/4LlZ3cCFW34z/d2eSLBdBZeynO6au/1v3yaN9sOq:mAEE4nMAvzlYLqeL93yOVq
- TLSH T14BB49C52F93EBC0DF7A8517EBD6895A0226C7C017F09D9B665D8FF8D81385A26EC0207
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.