General
- Target 2026-08-02_5cf663c44bd056956d43364a08e299e7_coinminer_elex_wannacry
- Size 488KB
- Sample260802-w3dn3avxf1
- SHA256 0309c31183f28e3f03603db8b8bea1c56a3920c656582f185b21425621c17534
- MD5 5cf663c44bd056956d43364a08e299e7
- SHA1 00201b248147ac6bf63c888fce61c64e1418fabe
- SHA512 6593ac5149783a4840395f5454636a1481888dd1ee2fb05945b5f9f0e82b6bea702d32468a7f1e6f56b31dfdee064ad804313166c724ed010e2aa626d1ce0ca6
- SSDEEP 12288:mAECqG9aRm4K4AWgVANGk3jq53/93yOVq:mQqG9tHUq5F3Vq
- TLSH T1FFB4CFE77B199458DAA108778C08C6AC6F2BEC7D1C728F07552DF7AD97312C72A248C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_5cf663c44bd056956d43364a08e299e7_coinminer_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_5cf663c44bd056956d43364a08e299e7_coinminer_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_5cf663c44bd056956d43364a08e299e7_coinminer_elex_wannacry
- Size 488KB
- SHA256 0309c31183f28e3f03603db8b8bea1c56a3920c656582f185b21425621c17534
- MD5 5cf663c44bd056956d43364a08e299e7
- SHA1 00201b248147ac6bf63c888fce61c64e1418fabe
- SHA512 6593ac5149783a4840395f5454636a1481888dd1ee2fb05945b5f9f0e82b6bea702d32468a7f1e6f56b31dfdee064ad804313166c724ed010e2aa626d1ce0ca6
- SSDEEP 12288:mAECqG9aRm4K4AWgVANGk3jq53/93yOVq:mQqG9tHUq5F3Vq
- TLSH T1FFB4CFE77B199458DAA108778C08C6AC6F2BEC7D1C728F07552DF7AD97312C72A248C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.