General
- Target 2026-08-01_bb3b57f504a379bf8f26c40794eea569_coinminer_elex_wannacry
- Size 488KB
- Sample260801-yerxwsfk41
- SHA256 872115691291cdc8d9f709e56d162919ff35ad196f156fa52d1a10732730772f
- MD5 bb3b57f504a379bf8f26c40794eea569
- SHA1 de5d51bef1cd9916950a9b8ff8a5b0942f7e51f1
- SHA512 36eedf77489428da1d6d237276271893671c1552d6de4bb7f2571fbc9266cc3d70745b0d843f5e529c65dce363d977c7b62eb71435c961efe2dca6a3bdd71965
- SSDEEP 6144:mAEDKQxVUq/xVc424Iywau/1v3yaN9sOq:mAEDKQkIc42v93yOVq
- TLSH T1DDB4BE80FA51F56FCEFC1D739D4497EBEBB59C2A5E140986E009BF8E773922AC841112
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_bb3b57f504a379bf8f26c40794eea569_coinminer_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_bb3b57f504a379bf8f26c40794eea569_coinminer_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_bb3b57f504a379bf8f26c40794eea569_coinminer_elex_wannacry
- Size 488KB
- SHA256 872115691291cdc8d9f709e56d162919ff35ad196f156fa52d1a10732730772f
- MD5 bb3b57f504a379bf8f26c40794eea569
- SHA1 de5d51bef1cd9916950a9b8ff8a5b0942f7e51f1
- SHA512 36eedf77489428da1d6d237276271893671c1552d6de4bb7f2571fbc9266cc3d70745b0d843f5e529c65dce363d977c7b62eb71435c961efe2dca6a3bdd71965
- SSDEEP 6144:mAEDKQxVUq/xVc424Iywau/1v3yaN9sOq:mAEDKQkIc42v93yOVq
- TLSH T1DDB4BE80FA51F56FCEFC1D739D4497EBEBB59C2A5E140986E009BF8E773922AC841112
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.