General
- Target 2026-08-01_a7a4c22214b5dc8845cfc14e27c37def_coinminer_elex_wannacry
- Size 488KB
- Sample260801-tls2bazfqf
- SHA256 7171d88acc58eff2dd61b6fc6f5caee262ce67046e934360cde07211987b5f11
- MD5 a7a4c22214b5dc8845cfc14e27c37def
- SHA1 a596e53ce8ed4c16c6f79e55121980be942f73c7
- SHA512 f743c69ab470fff0a722728914fb7370184510ed8eb665163a691c0bfa188149709ccba897890305e1675238a57322343b4704a1f118707ed98d3b16340d92ce
- SSDEEP 6144:mAEGAaSgrvAyDbMUvDc6nHKU6xY9gLau/1v3yaN9sOq:mAEGAirvTFR0ymb93yOVq
- TLSH T134B4CF4DB951C5ECCEE494BA5DC9D2F12221FDF48E866E1AE904F3FE2C3106E2954C4A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_a7a4c22214b5dc8845cfc14e27c37def_coinminer_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_a7a4c22214b5dc8845cfc14e27c37def_coinminer_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_a7a4c22214b5dc8845cfc14e27c37def_coinminer_elex_wannacry
- Size 488KB
- SHA256 7171d88acc58eff2dd61b6fc6f5caee262ce67046e934360cde07211987b5f11
- MD5 a7a4c22214b5dc8845cfc14e27c37def
- SHA1 a596e53ce8ed4c16c6f79e55121980be942f73c7
- SHA512 f743c69ab470fff0a722728914fb7370184510ed8eb665163a691c0bfa188149709ccba897890305e1675238a57322343b4704a1f118707ed98d3b16340d92ce
- SSDEEP 6144:mAEGAaSgrvAyDbMUvDc6nHKU6xY9gLau/1v3yaN9sOq:mAEGAirvTFR0ymb93yOVq
- TLSH T134B4CF4DB951C5ECCEE494BA5DC9D2F12221FDF48E866E1AE904F3FE2C3106E2954C4A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.