General
- Target 2026-08-05_5022f0c2091a70e718e677fd08a21924_coinminer_elex_wannacry
- Size 488KB
- Sample260805-w9gdjayyfz
- SHA256 844f55ae8fcd999586a47e5f57b47d7c14eb146f06cd9c2ce7643fbd043aad1c
- MD5 5022f0c2091a70e718e677fd08a21924
- SHA1 7387d2369cb06cf43c00eef0e2be5aa095a8e77b
- SHA512 6e82f2a07d8a887240515f4f7394213a31b461bd0f2f8c212850545df335c6a125c78452b203d526bc8876768946b42f16fba86fb0ec536aaf80dcbe66970b8c
- SSDEEP 6144:mAENUZtDCFi2k9D380ElmtTzau/1v3yaN9sOq:mAENkDV9D3z93yOVq
- TLSH T167B4BEB5B154E12DD9A2C4711C59F6FC6B231E562DC1C92B2B67F38E9BB32C1CB84122
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_5022f0c2091a70e718e677fd08a21924_coinminer_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_5022f0c2091a70e718e677fd08a21924_coinminer_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_5022f0c2091a70e718e677fd08a21924_coinminer_elex_wannacry
- Size 488KB
- SHA256 844f55ae8fcd999586a47e5f57b47d7c14eb146f06cd9c2ce7643fbd043aad1c
- MD5 5022f0c2091a70e718e677fd08a21924
- SHA1 7387d2369cb06cf43c00eef0e2be5aa095a8e77b
- SHA512 6e82f2a07d8a887240515f4f7394213a31b461bd0f2f8c212850545df335c6a125c78452b203d526bc8876768946b42f16fba86fb0ec536aaf80dcbe66970b8c
- SSDEEP 6144:mAENUZtDCFi2k9D380ElmtTzau/1v3yaN9sOq:mAENkDV9D3z93yOVq
- TLSH T167B4BEB5B154E12DD9A2C4711C59F6FC6B231E562DC1C92B2B67F38E9BB32C1CB84122
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.