General
- Target 2026-08-04_64a2dc55f31e1a8c7aa179bc6105e6ba_coinminer_elex_wannacry
- Size 488KB
- Sample260804-ypfydadl2t
- SHA256 d86db83cea184447afc40a572efaeb3e505ea0380b042ec4542d69a26fe7482b
- MD5 64a2dc55f31e1a8c7aa179bc6105e6ba
- SHA1 c9d9213f3d709ad489e7c71af9702ee4de819c96
- SHA512 9ec17fbe1e327b4a59d85dfef3dd3eadc333a354deecc7dc6de7f946bd09f3b02adc85d8b7bc2bd33365b93bc23a2f73d13748c38528f19fd3d396ea55287583
- SSDEEP 6144:mAE/2Ot0uutZLrK4nmikyOsa80Urnau/1v3yaN9sOq:mAEZtmfp0y68P93yOVq
- TLSH T151B4CF403A7AF72EEAD556B1CDCA96F36E671C0E3C122F17A1C8B79D0C356E1D940225
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_64a2dc55f31e1a8c7aa179bc6105e6ba_coinminer_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_64a2dc55f31e1a8c7aa179bc6105e6ba_coinminer_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_64a2dc55f31e1a8c7aa179bc6105e6ba_coinminer_elex_wannacry
- Size 488KB
- SHA256 d86db83cea184447afc40a572efaeb3e505ea0380b042ec4542d69a26fe7482b
- MD5 64a2dc55f31e1a8c7aa179bc6105e6ba
- SHA1 c9d9213f3d709ad489e7c71af9702ee4de819c96
- SHA512 9ec17fbe1e327b4a59d85dfef3dd3eadc333a354deecc7dc6de7f946bd09f3b02adc85d8b7bc2bd33365b93bc23a2f73d13748c38528f19fd3d396ea55287583
- SSDEEP 6144:mAE/2Ot0uutZLrK4nmikyOsa80Urnau/1v3yaN9sOq:mAEZtmfp0y68P93yOVq
- TLSH T151B4CF403A7AF72EEAD556B1CDCA96F36E671C0E3C122F17A1C8B79D0C356E1D940225
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.