General
- Target 2026-08-09_3117cf6d767fbb9abc9ba8d5c65166de_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 968KB
- Sample260809-mb94hsdm71
- SHA256 4192793de1ed34eb1d54dabb36409b70a58a9fe7e8af45dbb40066070782418e
- MD5 3117cf6d767fbb9abc9ba8d5c65166de
- SHA1 a1638fa48a04998e209cf2ad86f493b01ee7e305
- SHA512 42bfc599b227fc389744d1ab79debc565b0b1d1718df6c4ab7a5d7ce00db83cc2210cd11771584fcda1e840c5bc38b7fa0d1b96ca620908b2a37eb6c269f22ac
- SSDEEP 24576:1GRzatThRiVNbLGJv6plFh9iGa2oMYMgdsHGA:o8TjFJspDLoVMgdkJ
- TLSH T13425F0192B80CDA1F26FC07296D06F34B6772A202733CD4A6F4896391BF1E5FE792156
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_3117cf6d767fbb9abc9ba8d5c65166de_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_3117cf6d767fbb9abc9ba8d5c65166de_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_3117cf6d767fbb9abc9ba8d5c65166de_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 968KB
- SHA256 4192793de1ed34eb1d54dabb36409b70a58a9fe7e8af45dbb40066070782418e
- MD5 3117cf6d767fbb9abc9ba8d5c65166de
- SHA1 a1638fa48a04998e209cf2ad86f493b01ee7e305
- SHA512 42bfc599b227fc389744d1ab79debc565b0b1d1718df6c4ab7a5d7ce00db83cc2210cd11771584fcda1e840c5bc38b7fa0d1b96ca620908b2a37eb6c269f22ac
- SSDEEP 24576:1GRzatThRiVNbLGJv6plFh9iGa2oMYMgdsHGA:o8TjFJspDLoVMgdkJ
- TLSH T13425F0192B80CDA1F26FC07296D06F34B6772A202733CD4A6F4896391BF1E5FE792156
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application