General
- Target 2026-08-03_6ef8e2b72e0c82718a06cdd7c0a026ab_coinminer_darpapox_elex_nymaim_rhadamanthys_wannacry
- Size 2.2MB
- Sample260803-c2dg5aar31
- SHA256 c19fae6ea4b141d9455a75986bda6ab9f970f8a79392eea93046f358921a64e1
- MD5 6ef8e2b72e0c82718a06cdd7c0a026ab
- SHA1 f78c6f8d15ebe65ab30288609e62e2878d83806a
- SHA512 ea2c3e47fa8758e3184a297adf36ad40a04be9719f86ea8ff41d5d83f52888ecab9d670ffb2370a82c711e31f1992eab5bf1d09ae30a8595261abfff6cba202c
- SSDEEP 49152:HN1PptbTChxKCnFnQXBbrtgb/iQvu0UHOW:t1Ppt6hxvWbrtUTrUHOW
- TLSH T1EDB5E011A390C826E39BC17187D49E75B6B7AE202B33DC87AF8439752AF1E4FD791112
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_6ef8e2b72e0c82718a06cdd7c0a026ab_coinminer_darpapox_elex_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_6ef8e2b72e0c82718a06cdd7c0a026ab_coinminer_darpapox_elex_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_6ef8e2b72e0c82718a06cdd7c0a026ab_coinminer_darpapox_elex_nymaim_rhadamanthys_wannacry
- Size 2.2MB
- SHA256 c19fae6ea4b141d9455a75986bda6ab9f970f8a79392eea93046f358921a64e1
- MD5 6ef8e2b72e0c82718a06cdd7c0a026ab
- SHA1 f78c6f8d15ebe65ab30288609e62e2878d83806a
- SHA512 ea2c3e47fa8758e3184a297adf36ad40a04be9719f86ea8ff41d5d83f52888ecab9d670ffb2370a82c711e31f1992eab5bf1d09ae30a8595261abfff6cba202c
- SSDEEP 49152:HN1PptbTChxKCnFnQXBbrtgb/iQvu0UHOW:t1Ppt6hxvWbrtUTrUHOW
- TLSH T1EDB5E011A390C826E39BC17187D49E75B6B7AE202B33DC87AF8439752AF1E4FD791112
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory