General
- Target 2026-08-05_6dcfe9a2d818d33b2a357a3c4d6eeb19_coinminer_elex_upatre_wannacry
- Size 29KB
- Sample260805-fdg27aycnb
- SHA256 3aa153832868c12c1a8e7dab4eb96aed7b39631d89ca6bb5e1e808940a130dce
- MD5 6dcfe9a2d818d33b2a357a3c4d6eeb19
- SHA1 f00977da05d1cf41029267d4bf42ea1d04f6acf7
- SHA512 791cffddbdfc5a6959c454872cfb1b4a982c6c85f2ca1da52d0a8bdf9d8e0378b112df133f96b8c9f0d09c2c61040ea1ed278b4d36c1b26ab28dd27b4c7c0c61
- SSDEEP 384:LLz3qWcd5DUVQQ4oM+JKcMef9YlWRhQIUY/FYHZxgO8vixamynIsfRsTf:Xz3qWc7Re1Jen6hpFwxgOTE5jfKT
- TLSH T1E2D2F8DEDAC64989C8853F3B92FA5B0091189E1D87A456EBE9A4FC438D7F2C14C31D9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-05_6dcfe9a2d818d33b2a357a3c4d6eeb19_coinminer_elex_upatre_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_6dcfe9a2d818d33b2a357a3c4d6eeb19_coinminer_elex_upatre_wannacry
- Size 29KB
- SHA256 3aa153832868c12c1a8e7dab4eb96aed7b39631d89ca6bb5e1e808940a130dce
- MD5 6dcfe9a2d818d33b2a357a3c4d6eeb19
- SHA1 f00977da05d1cf41029267d4bf42ea1d04f6acf7
- SHA512 791cffddbdfc5a6959c454872cfb1b4a982c6c85f2ca1da52d0a8bdf9d8e0378b112df133f96b8c9f0d09c2c61040ea1ed278b4d36c1b26ab28dd27b4c7c0c61
- SSDEEP 384:LLz3qWcd5DUVQQ4oM+JKcMef9YlWRhQIUY/FYHZxgO8vixamynIsfRsTf:Xz3qWc7Re1Jen6hpFwxgOTE5jfKT
- TLSH T1E2D2F8DEDAC64989C8853F3B92FA5B0091189E1D87A456EBE9A4FC438D7F2C14C31D9C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE