General
- Target 2026-08-04_0cfbbdaeaf4c229ae97a05c9cfd50904_coinminer_elex_upatre_wannacry
- Size 29KB
- Sample260804-t835ssvfpc
- SHA256 7c303e62ce40f714043383fc8ca7c6bfcca12249341e6aa1dbc394c1bb12106a
- MD5 0cfbbdaeaf4c229ae97a05c9cfd50904
- SHA1 9a729e26e2409c17064297769d666984e604d1b1
- SHA512 0b4c1659ee973806901e7bee962a4b6d717d8e79758620bac0aebd7129a7449a9dec5477577ffdddc3ecd1954dd905ed8f2f91b0de7685fd68ed24bb69cea2a3
- SSDEEP 384:LLz3qWcd5DUVQQ4oM+JKcMef9YlWRhQIUY/FYHZxgO8vixamynIsfRsTA:Xz3qWc7Re1Jen6hpFwxgOTE5jfKM
- TLSH T1EED2F8DED9864989C8853F3B92FE5B0091189E1D87A456EBE9A4FC438D7F2C14C31D9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-04_0cfbbdaeaf4c229ae97a05c9cfd50904_coinminer_elex_upatre_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_0cfbbdaeaf4c229ae97a05c9cfd50904_coinminer_elex_upatre_wannacry
- Size 29KB
- SHA256 7c303e62ce40f714043383fc8ca7c6bfcca12249341e6aa1dbc394c1bb12106a
- MD5 0cfbbdaeaf4c229ae97a05c9cfd50904
- SHA1 9a729e26e2409c17064297769d666984e604d1b1
- SHA512 0b4c1659ee973806901e7bee962a4b6d717d8e79758620bac0aebd7129a7449a9dec5477577ffdddc3ecd1954dd905ed8f2f91b0de7685fd68ed24bb69cea2a3
- SSDEEP 384:LLz3qWcd5DUVQQ4oM+JKcMef9YlWRhQIUY/FYHZxgO8vixamynIsfRsTA:Xz3qWc7Re1Jen6hpFwxgOTE5jfKM
- TLSH T1EED2F8DED9864989C8853F3B92FE5B0091189E1D87A456EBE9A4FC438D7F2C14C31D9C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE