General
- Target 2026-08-05_587b5c9077add9595538676f57675ab7_coinminer_elex_wannacry
- Size 488KB
- Sample260805-w6ds8stdna
- SHA256 1d27f373e259405e686dd29e7aacf9628896b5a714c2a5a5999bef75d42e27ae
- MD5 587b5c9077add9595538676f57675ab7
- SHA1 f911c8217f47555565253e8b480fc3e21ece601a
- SHA512 1bb70d88fd18d2a8c4e17e77a8b247be430d0ef4dd4223294b4a4470bd96d01216756ec42fc8538463ed4d0280f2ab0089b44dfca38211cebceb7754ae0cb13e
- SSDEEP 6144:mAEZ+eCEh0DVDIT1dc5fzsau/1v3yaN9sOq:mAEwrVDwQ7w93yOVq
- TLSH T107B4D0DC790AD81CE6E6F47CED0B9BBD65319E600CE588073EA2739DD6373814A016DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_587b5c9077add9595538676f57675ab7_coinminer_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_587b5c9077add9595538676f57675ab7_coinminer_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_587b5c9077add9595538676f57675ab7_coinminer_elex_wannacry
- Size 488KB
- SHA256 1d27f373e259405e686dd29e7aacf9628896b5a714c2a5a5999bef75d42e27ae
- MD5 587b5c9077add9595538676f57675ab7
- SHA1 f911c8217f47555565253e8b480fc3e21ece601a
- SHA512 1bb70d88fd18d2a8c4e17e77a8b247be430d0ef4dd4223294b4a4470bd96d01216756ec42fc8538463ed4d0280f2ab0089b44dfca38211cebceb7754ae0cb13e
- SSDEEP 6144:mAEZ+eCEh0DVDIT1dc5fzsau/1v3yaN9sOq:mAEwrVDwQ7w93yOVq
- TLSH T107B4D0DC790AD81CE6E6F47CED0B9BBD65319E600CE588073EA2739DD6373814A016DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.