General
- Target 2026-08-04_8dde5bc2775f2bd96eef90c9e805c6b4_coinminer_elex_wannacry
- Size 41KB
- Sample260804-seckbagr61
- SHA256 439b3e5ad24ffbc171912a8f2f0ee1a9e2d629d1642f3ed55731a7d8e7d058ac
- MD5 8dde5bc2775f2bd96eef90c9e805c6b4
- SHA1 1fe19b1374976daca4e8d009c800b06b482abfbb
- SHA512 2650234db8e44c38544b46b97960c9d5c2acbc6f29b8a2e94f9e749ba0614e342654a2bdcc85c6887133b5b0d4d47b3e81eade344bd7f2c2174d37c2eaf484e3
- SSDEEP 384:a5Y8Erez+6PXW030iTax9aiYogOBIsjXvbMU:aPEiz+6vTkiTOYovXvbf
- TLSH T1C4134B876F4C4AA3C3E1423936889A3EC7F5517429286E02E7F8434F2D7B6E4E579315
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-04_8dde5bc2775f2bd96eef90c9e805c6b4_coinminer_elex_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_8dde5bc2775f2bd96eef90c9e805c6b4_coinminer_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_8dde5bc2775f2bd96eef90c9e805c6b4_coinminer_elex_wannacry
- Size 41KB
- SHA256 439b3e5ad24ffbc171912a8f2f0ee1a9e2d629d1642f3ed55731a7d8e7d058ac
- MD5 8dde5bc2775f2bd96eef90c9e805c6b4
- SHA1 1fe19b1374976daca4e8d009c800b06b482abfbb
- SHA512 2650234db8e44c38544b46b97960c9d5c2acbc6f29b8a2e94f9e749ba0614e342654a2bdcc85c6887133b5b0d4d47b3e81eade344bd7f2c2174d37c2eaf484e3
- SSDEEP 384:a5Y8Erez+6PXW030iTax9aiYogOBIsjXvbMU:aPEiz+6vTkiTOYovXvbf
- TLSH T1C4134B876F4C4AA3C3E1423936889A3EC7F5517429286E02E7F8434F2D7B6E4E579315
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.