General
- Target 2026-08-02_f983bb3ca346b982513ef58b72672a42_coinminer_elex_wannacry
- Size 488KB
- Sample260802-tkhh7awelb
- SHA256 d39d5e300085e7de4293bc8df32a005a11d0c6df792e0b93b913ace50409796a
- MD5 f983bb3ca346b982513ef58b72672a42
- SHA1 173b05842ac1a84814552c4137b97051340d6615
- SHA512 e2995c4ce0151fd9357607a58643cebd6bf4125eef7a44493e239ba812053928c2a498ed337046f5d8371cd6622c9ea0cbb8f407135bd567a6d341ee99546fd8
- SSDEEP 6144:mAEhawBSwlBm3R/+XSfE9TIw8wGwLMor9au/1v3yaN9sOq:mAElSkBmh/LEl5B93yOVq
- TLSH T1A3B47B8DB1C180CCD59C49F29D2F99E027546C7F2F218876A227FB7D49361B2C93A1CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_f983bb3ca346b982513ef58b72672a42_coinminer_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_f983bb3ca346b982513ef58b72672a42_coinminer_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_f983bb3ca346b982513ef58b72672a42_coinminer_elex_wannacry
- Size 488KB
- SHA256 d39d5e300085e7de4293bc8df32a005a11d0c6df792e0b93b913ace50409796a
- MD5 f983bb3ca346b982513ef58b72672a42
- SHA1 173b05842ac1a84814552c4137b97051340d6615
- SHA512 e2995c4ce0151fd9357607a58643cebd6bf4125eef7a44493e239ba812053928c2a498ed337046f5d8371cd6622c9ea0cbb8f407135bd567a6d341ee99546fd8
- SSDEEP 6144:mAEhawBSwlBm3R/+XSfE9TIw8wGwLMor9au/1v3yaN9sOq:mAElSkBmh/LEl5B93yOVq
- TLSH T1A3B47B8DB1C180CCD59C49F29D2F99E027546C7F2F218876A227FB7D49361B2C93A1CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.