General
- Target 2026-08-01_a9b129dd623a22e5af2befbb8e500f99_coinminer_elex_wannacry
- Size 488KB
- Sample260801-qcaltsbl81
- SHA256 1ce31f3f5dfc9646ccdc59f7d20ef5e10883aeb02ef042ff060815066d3615d8
- MD5 a9b129dd623a22e5af2befbb8e500f99
- SHA1 7e8ac8e90f8a00be9afb3335d784dbd94f57be34
- SHA512 6ccafec8196fd2133409f9156415bdd48c9ace13ee8d47e82dc3f07c2b3b54974ad604875abe86364405cb3b1b88559b25437e14ff8a9faf3fabf19131e5bc79
- SSDEEP 6144:mAEoKksnv55lTL7Y/OkZjszjok/Hau/1v3yaN9sOq:mAEGstHk2kZgzjok/v93yOVq
- TLSH T150B4D05AB1D6E3DECAE095791E1BD6F42392FE234E048966B214375F1F32E82CB4421D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_a9b129dd623a22e5af2befbb8e500f99_coinminer_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_a9b129dd623a22e5af2befbb8e500f99_coinminer_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_a9b129dd623a22e5af2befbb8e500f99_coinminer_elex_wannacry
- Size 488KB
- SHA256 1ce31f3f5dfc9646ccdc59f7d20ef5e10883aeb02ef042ff060815066d3615d8
- MD5 a9b129dd623a22e5af2befbb8e500f99
- SHA1 7e8ac8e90f8a00be9afb3335d784dbd94f57be34
- SHA512 6ccafec8196fd2133409f9156415bdd48c9ace13ee8d47e82dc3f07c2b3b54974ad604875abe86364405cb3b1b88559b25437e14ff8a9faf3fabf19131e5bc79
- SSDEEP 6144:mAEoKksnv55lTL7Y/OkZjszjok/Hau/1v3yaN9sOq:mAEGstHk2kZgzjok/v93yOVq
- TLSH T150B4D05AB1D6E3DECAE095791E1BD6F42392FE234E048966B214375F1F32E82CB4421D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.