2026-08-08_f7cd690060b0ddf84be03117a35988f6_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry

General

Target
2026-08-08_f7cd690060b0ddf84be03117a35988f6_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
Size 280KB
Sample260808-fbjg8szgrf
SHA256 20682fb7af1c8be1eb9dd77225a34c7097185c11cfaeba600125d65d99900a57
MD5 f7cd690060b0ddf84be03117a35988f6
SHA1 41029e979281e0f7e53df073f95078db33812f28
SHA512 569321f98ac4d94991268d4d83dc541938d8661284474498d5f4e0823a21a7a631deff3aae92af38de3b422497bc5dd3d4347db36f48d81c286e3b3661d2bbba
SSDEEP 6144:f7KqcWxc5tTBsJWKFGUOfC6YJa4f9ufesp:j1pxc5tTG7FE66YY4Mn
TLSH
T1FA54CF1A79D088B2C0AF917780D9BB38F77B33311322D94B3B5C9A751D32766E5262C6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-08_f7cd690060b0ddf84be03117a35988f6_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry

File Explorer

2026-08-08_f7cd690060b0ddf84be03117a35988f6_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry

.exe 280KB

2026-08-08_f7cd690060b0ddf84be03117a35988f6_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry

IMPHASH 8ee1d6ac14557b768dcccdd9bb83afc0
SHA256 20682fb7af1c8be1eb9dd77225a34c7097185c11cfaeba600125d65d99900a57
MD5 f7cd690060b0ddf84be03117a35988f6
SHA1 41029e979281e0f7e53df073f95078db33812f28
SHA512 569321f98ac4d94991268d4d83dc541938d8661284474498d5f4e0823a21a7a631deff3aae92af38de3b422497bc5dd3d4347db36f48d81c286e3b3661d2bbba
SSDEEP 6144:f7KqcWxc5tTBsJWKFGUOfC6YJa4f9ufesp:j1pxc5tTG7FE66YY4Mn
TLSH
T1FA54CF1A79D088B2C0AF917780D9BB38F77B33311322D94B3B5C9A751D32766E5262C6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

278532

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcAddress GetModuleHandleW GetEnvironmentVariableW GetLastError CreateDirectoryW FindClose FindFirstFileW CloseHandle CreateFileW FreeLibrary OpenProcess WideCharToMultiByte TerminateProcess GetCommandLineW GetModuleFileNameW CreateProcessW lstrlenW GetTempPathW GetModuleHandleA GetOEMCP GetACP SetEndOfFile FlushFileBuffers SetStdHandle GetStringTypeW HeapAlloc GetProcessHeap VirtualAlloc VirtualProtect VirtualFree LoadLibraryA IsBadReadPtr HeapFree DeleteFileW GetTempFileNameW CopyFileW RtlUnwind InterlockedDecrement InterlockedIncrement RaiseException GetStartupInfoW GetVersion ExitProcess HeapReAlloc GetCurrentThreadId TlsSetValue TlsAlloc SetLastError TlsGetValue InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetCurrentProcess HeapSize HeapDestroy HeapCreate IsBadWritePtr SetUnhandledExceptionFilter UnhandledExceptionFilter FreeEnvironmentStringsA MultiByteToWideChar FreeEnvironmentStringsW GetEnvironmentStringsW GetEnvironmentStrings GetCommandLineA SetHandleCount GetStdHandle GetFileType GetStartupInfoA WriteFile GetModuleFileNameA SetFilePointer ReadFile IsBadCodePtr LCMapStringA LCMapStringW GetCPInfo GetStringTypeA

shell32

CommandLineToArgvW

psapi

GetModuleFileNameExW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-08_f7cd690060b0ddf84be03117a35988f6_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry

kernel32

shell32

psapi

generic