General
- Target 2026-08-03_5bd97d82e55fb496f3a2e18a38fd98ef_coinminer_darpapox_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.9MB
- Sample260803-c5n32axanb
- SHA256 9f0ccebf18a0d9b63ce67931c73a1894f0ebed90c2385190f72efa15dafd24e0
- MD5 5bd97d82e55fb496f3a2e18a38fd98ef
- SHA1 2a46a5e449260661ef347899f5126283ae31e099
- SHA512 49e2ba40362ae442fc81be2e6c7a1957e7ff7513cd0f68b248fc544c728e6cd432cbb50f6af905d42c352f3f2d6a3e387c0a54d85f9c2aa7735e87d6f3839d01
- SSDEEP 24576:UXXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0US:U9bTChxKCnFnQXBbrtgb/iQvu0UHON
- TLSH T1BA95EF122790CCA1F36FC17243E56E39BA7329213733DD865E489934ABF2E2BE791145
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_5bd97d82e55fb496f3a2e18a38fd98ef_coinminer_darpapox_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_5bd97d82e55fb496f3a2e18a38fd98ef_coinminer_darpapox_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_5bd97d82e55fb496f3a2e18a38fd98ef_coinminer_darpapox_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.9MB
- SHA256 9f0ccebf18a0d9b63ce67931c73a1894f0ebed90c2385190f72efa15dafd24e0
- MD5 5bd97d82e55fb496f3a2e18a38fd98ef
- SHA1 2a46a5e449260661ef347899f5126283ae31e099
- SHA512 49e2ba40362ae442fc81be2e6c7a1957e7ff7513cd0f68b248fc544c728e6cd432cbb50f6af905d42c352f3f2d6a3e387c0a54d85f9c2aa7735e87d6f3839d01
- SSDEEP 24576:UXXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0US:U9bTChxKCnFnQXBbrtgb/iQvu0UHON
- TLSH T1BA95EF122790CCA1F36FC17243E56E39BA7329213733DD865E489934ABF2E2BE791145
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory