General
- Target 2026-08-04_11f0ee25e07b038c96a26338cf082848_coinminer_elex_wannacry
- Size 488KB
- Sample260804-z3esxaha89
- SHA256 14f3323ba461d13d0bc259c8228f57485ea76f538cf73342e79a392b11b6198e
- MD5 11f0ee25e07b038c96a26338cf082848
- SHA1 30f6298c58cbc349f386974dbdceec38742b7f65
- SHA512 5050323b3d6443f0bee3f7aa06a4bee771f9ba674e1895d0c79a886108e9f2c85547af7cc581a2ba4322e5cd35682aee10a414a8016b1a38a5fa2a4664e4551a
- SSDEEP 6144:mAEdUiUtfxpqjyfpMaEfghjJmYyF3au/1v3yaN9sOq:mAEIM7ghoYY93yOVq
- TLSH T189B4BEC6BD01D409EEF28132FD51CDFFE6595D224D821D466750B3CC08BD6AACF26A8A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_11f0ee25e07b038c96a26338cf082848_coinminer_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_11f0ee25e07b038c96a26338cf082848_coinminer_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_11f0ee25e07b038c96a26338cf082848_coinminer_elex_wannacry
- Size 488KB
- SHA256 14f3323ba461d13d0bc259c8228f57485ea76f538cf73342e79a392b11b6198e
- MD5 11f0ee25e07b038c96a26338cf082848
- SHA1 30f6298c58cbc349f386974dbdceec38742b7f65
- SHA512 5050323b3d6443f0bee3f7aa06a4bee771f9ba674e1895d0c79a886108e9f2c85547af7cc581a2ba4322e5cd35682aee10a414a8016b1a38a5fa2a4664e4551a
- SSDEEP 6144:mAEdUiUtfxpqjyfpMaEfghjJmYyF3au/1v3yaN9sOq:mAEIM7ghoYY93yOVq
- TLSH T189B4BEC6BD01D409EEF28132FD51CDFFE6595D224D821D466750B3CC08BD6AACF26A8A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.