Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
09/08/2026, 04:49
Behavioral task
behavioral1
Sample
2026-08-09_e1faedf9b8bc8b5ec9ec89bc3bd6e62e_coinminer_elex_wannacry.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
General
- Target 2026-08-09_e1faedf9b8bc8b5ec9ec89bc3bd6e62e_coinminer_elex_wannacry.exe
- Size 528KB
- Sample260809-ffzp1s1alg
- SHA256 0590ef153e47a8e4f03f0046f39ce8d41092e353d641fa0775f58b1b83a90349
- MD5 e1faedf9b8bc8b5ec9ec89bc3bd6e62e
- SHA1 1bce0148ceb979aa0361829c3704de65185ac69e
- SHA512 f03ed3151e33919220e80184a7c0d6397ead956ea86d9f81e9f03921c1280c4435dc912460feaf41651adda5d4254371d71fdc3870a9515eacc4ad619f974cca
- SSDEEP 6144:jzWPYSc7LT8VFnISM/vzqmQnH3sePc4jDyiot:jz4s0FKOH3seYio
- TLSH T141B4BF013BE2C5B5E56605315ACAEBF646B6FE2C8F1409E333D4AF0F7D78091D22A619
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- UPX dump on OEP (original entry point) 2 IoCs
resource yara_rule behavioral2/memory/1372-0-0x0000000000400000-0x0000000000484000-memory.dmp UPX behavioral2/memory/1372-2-0x0000000000400000-0x0000000000484000-memory.dmp UPX -
resource yara_rule behavioral2/memory/1372-0-0x0000000000400000-0x0000000000484000-memory.dmp upx behavioral2/memory/1372-2-0x0000000000400000-0x0000000000484000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-09_e1faedf9b8bc8b5ec9ec89bc3bd6e62e_coinminer_elex_wannacry.exe