2026-08-07_82c22787cc59a3d3b4894ffac0cbc19e_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry

General

Target
2026-08-07_82c22787cc59a3d3b4894ffac0cbc19e_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
Size 284KB
Sample260807-eetxpsxanf
SHA256 8983f3abfcec521747d31bc81dec94a066bc25cd85977f02621c174c109844cc
MD5 82c22787cc59a3d3b4894ffac0cbc19e
SHA1 3345b2a3560b3ca2cbd3498a1eff175b5a4258ef
SHA512 e93f4a014c709bef24e8020b33ab075d1513134da5121f33b059a38c95abca1b99b3ba4b3a2c2a12c7cf2fb60f91d76924291fc2255d46cc207212745a6d71a7
SSDEEP 6144:Z7L1qcWxc5tTBsJWKFGUOfCZHBTMaKw65oRjs9Esp:ZL4pxc5tTG7FE6jwr5o+N
TLSH
T11454D01A79D08DB2C0BFC0B780D5BB38F77736311322994B779C9A750D32766E922286
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-07_82c22787cc59a3d3b4894ffac0cbc19e_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry

File Explorer

2026-08-07_82c22787cc59a3d3b4894ffac0cbc19e_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry

.exe 284KB

2026-08-07_82c22787cc59a3d3b4894ffac0cbc19e_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry

IMPHASH 8ee1d6ac14557b768dcccdd9bb83afc0
SHA256 8983f3abfcec521747d31bc81dec94a066bc25cd85977f02621c174c109844cc
MD5 82c22787cc59a3d3b4894ffac0cbc19e
SHA1 3345b2a3560b3ca2cbd3498a1eff175b5a4258ef
SHA512 e93f4a014c709bef24e8020b33ab075d1513134da5121f33b059a38c95abca1b99b3ba4b3a2c2a12c7cf2fb60f91d76924291fc2255d46cc207212745a6d71a7
SSDEEP 6144:Z7L1qcWxc5tTBsJWKFGUOfCZHBTMaKw65oRjs9Esp:ZL4pxc5tTG7FE6jwr5o+N
TLSH
T11454D01A79D08DB2C0BFC0B780D5BB38F77736311322994B779C9A750D32766E922286
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

282628

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcAddress GetModuleHandleW GetEnvironmentVariableW GetLastError CreateDirectoryW FindClose FindFirstFileW CloseHandle CreateFileW FreeLibrary OpenProcess WideCharToMultiByte TerminateProcess GetCommandLineW GetModuleFileNameW CreateProcessW lstrlenW GetTempPathW GetModuleHandleA GetOEMCP GetACP SetEndOfFile FlushFileBuffers SetStdHandle GetStringTypeW HeapAlloc GetProcessHeap VirtualAlloc VirtualProtect VirtualFree LoadLibraryA IsBadReadPtr HeapFree DeleteFileW GetTempFileNameW CopyFileW RtlUnwind InterlockedDecrement InterlockedIncrement RaiseException GetStartupInfoW GetVersion ExitProcess HeapReAlloc GetCurrentThreadId TlsSetValue TlsAlloc SetLastError TlsGetValue InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetCurrentProcess HeapSize HeapDestroy HeapCreate IsBadWritePtr SetUnhandledExceptionFilter UnhandledExceptionFilter FreeEnvironmentStringsA MultiByteToWideChar FreeEnvironmentStringsW GetEnvironmentStringsW GetEnvironmentStrings GetCommandLineA SetHandleCount GetStdHandle GetFileType GetStartupInfoA WriteFile GetModuleFileNameA SetFilePointer ReadFile IsBadCodePtr LCMapStringA LCMapStringW GetCPInfo GetStringTypeA

shell32

CommandLineToArgvW

psapi

GetModuleFileNameExW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-07_82c22787cc59a3d3b4894ffac0cbc19e_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry

kernel32

shell32

psapi

generic