General
- Target 2026-08-04_5b29503a4ee923cf0a9aa40885e50e63_coinminer_darpapox_elex_nymaim_rhadamanthys_wannacry
- Size 6.7MB
- Sample260805-a83pgsvdkg
- SHA256 297d1c79407ace4ff51f2a3fd1b5c121ef67755e19ccf52dae2eb7ba6aa81a29
- MD5 5b29503a4ee923cf0a9aa40885e50e63
- SHA1 296391dc2bb9c80bb6fe8729b6a34df9590aa84a
- SHA512 6db5ca1409929dd327e32df192dc271ebfe13d3988f2c50fb31f926509a1447ae3ff7857ae431ad2b30d01ac1a14ff583ec86a00b39de8d086dd92be4a031dbc
- SSDEEP 98304:+e3XQoI3neqsutviL+SZa2hi2ZWpZbCC9rbjz5a7oCs1TiQtE96hxvWbrtUTrUHT:+1uGTSZvjWpZTlb/l1HtEAx+NcIOS
- TLSH T1FB6623452394CDA0F25FC67643E2AFBAB87326213333D8526E49A0711BF1E8BE7D1156
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_5b29503a4ee923cf0a9aa40885e50e63_coinminer_darpapox_elex_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_5b29503a4ee923cf0a9aa40885e50e63_coinminer_darpapox_elex_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_5b29503a4ee923cf0a9aa40885e50e63_coinminer_darpapox_elex_nymaim_rhadamanthys_wannacry
- Size 6.7MB
- SHA256 297d1c79407ace4ff51f2a3fd1b5c121ef67755e19ccf52dae2eb7ba6aa81a29
- MD5 5b29503a4ee923cf0a9aa40885e50e63
- SHA1 296391dc2bb9c80bb6fe8729b6a34df9590aa84a
- SHA512 6db5ca1409929dd327e32df192dc271ebfe13d3988f2c50fb31f926509a1447ae3ff7857ae431ad2b30d01ac1a14ff583ec86a00b39de8d086dd92be4a031dbc
- SSDEEP 98304:+e3XQoI3neqsutviL+SZa2hi2ZWpZbCC9rbjz5a7oCs1TiQtE96hxvWbrtUTrUHT:+1uGTSZvjWpZTlb/l1HtEAx+NcIOS
- TLSH T1FB6623452394CDA0F25FC67643E2AFBAB87326213333D8526E49A0711BF1E8BE7D1156
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory