General
- Target 2026-08-03_e4aff51eb18dd298d8eb3e7cccc578da_coinminer_elex_wannacry
- Size 488KB
- Sample260803-t5azvavzds
- SHA256 5a886e6e98202e49f87cbb75a4b70b62c5cbb2614fcdad5aaabb21cb79743dfa
- MD5 e4aff51eb18dd298d8eb3e7cccc578da
- SHA1 9ce06b0a9ea6db26e66e427801ba317fa9f8ba32
- SHA512 d80226b4e14c6cf9a0f2e972fae6b5442f6f685c0c072fa3b5672712ebbd699bf7389cec381f909d281836be30ecc8ee830371fbf2a91fc105ec7c4fd92fdc1a
- SSDEEP 6144:mAEVXX/tTZCd0sx7vvYbEpt12mJ4rEA3hUVau/1v3yaN9sOq:mAEV/oJIEptImJhw493yOVq
- TLSH T15BB4BF5AB3C48958F8FBE2315F17E6BCF265AFA62DA4C9873058371F0D3529E089114B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_e4aff51eb18dd298d8eb3e7cccc578da_coinminer_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_e4aff51eb18dd298d8eb3e7cccc578da_coinminer_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_e4aff51eb18dd298d8eb3e7cccc578da_coinminer_elex_wannacry
- Size 488KB
- SHA256 5a886e6e98202e49f87cbb75a4b70b62c5cbb2614fcdad5aaabb21cb79743dfa
- MD5 e4aff51eb18dd298d8eb3e7cccc578da
- SHA1 9ce06b0a9ea6db26e66e427801ba317fa9f8ba32
- SHA512 d80226b4e14c6cf9a0f2e972fae6b5442f6f685c0c072fa3b5672712ebbd699bf7389cec381f909d281836be30ecc8ee830371fbf2a91fc105ec7c4fd92fdc1a
- SSDEEP 6144:mAEVXX/tTZCd0sx7vvYbEpt12mJ4rEA3hUVau/1v3yaN9sOq:mAEV/oJIEptImJhw493yOVq
- TLSH T15BB4BF5AB3C48958F8FBE2315F17E6BCF265AFA62DA4C9873058371F0D3529E089114B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.