General
- Target 2026-08-01_3eacd2bd270512bd5f76f9046b286b3a_coinminer_elex_rhadamanthys_wannacry
- Size 317KB
- Sample260802-ev4rvavarf
- SHA256 741a5a56cd3f9800ef517b18463d066ba56c353db8a93aaea5e6b5ef8b8d81cf
- MD5 3eacd2bd270512bd5f76f9046b286b3a
- SHA1 a029778774c8d298c00d650d221826715ab2867c
- SHA512 9d5221b0614897d2051f74fbe7e5d73216be05792135b660724a965ddff4dc3f78d13bc2197dfd0c5031b3934c97219e1667dffab0324b105d00543faf4347bc
- SSDEEP 3072:VkLiwjdmZtcCyPmToY1YDJSOTblVrOfw7TSjiHtEu1OpJAMp4UxOh:VUiwjsyPm9YFSOTJtti+tF1OpJxrxQ
- TLSH T17464D04778548DB7C99B817105A58B3B8F27B4A10B9082DFABBCADBD2D325C09D3174E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_3eacd2bd270512bd5f76f9046b286b3a_coinminer_elex_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_3eacd2bd270512bd5f76f9046b286b3a_coinminer_elex_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_3eacd2bd270512bd5f76f9046b286b3a_coinminer_elex_rhadamanthys_wannacry
- Size 317KB
- SHA256 741a5a56cd3f9800ef517b18463d066ba56c353db8a93aaea5e6b5ef8b8d81cf
- MD5 3eacd2bd270512bd5f76f9046b286b3a
- SHA1 a029778774c8d298c00d650d221826715ab2867c
- SHA512 9d5221b0614897d2051f74fbe7e5d73216be05792135b660724a965ddff4dc3f78d13bc2197dfd0c5031b3934c97219e1667dffab0324b105d00543faf4347bc
- SSDEEP 3072:VkLiwjdmZtcCyPmToY1YDJSOTblVrOfw7TSjiHtEu1OpJAMp4UxOh:VUiwjsyPm9YFSOTJtti+tF1OpJxrxQ
- TLSH T17464D04778548DB7C99B817105A58B3B8F27B4A10B9082DFABBCADBD2D325C09D3174E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE
-
Drops file in System32 directory