General
- Target 2026-08-09_f82a39f0d4942b05fc54396fe4c36b62_coinminer_darpapox_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.9MB
- Sample260809-ph7m3s1sct
- SHA256 c7216e3f2d1a232260a443c65f02b37dc387af0a568ec5e127e5fb131ff498f1
- MD5 f82a39f0d4942b05fc54396fe4c36b62
- SHA1 865e192512502303cec13e24221cbd4b1c0e0adc
- SHA512 7e18136628e8ec2d65fdac4c2f33b6f5519048d08cbcd02977c2f4124540f8a901e1c7bb9a5a7707c7830ae0a2db11a87660617ee5b1e11514b1d5c3112c246b
- SSDEEP 49152:T3KMRbTChxKCnFnQXBbrtgb/iQvu0UHOaQ:jjR6hxvWbrtUTrUHOR
- TLSH T18C95CD222790CD51F75BC07207E16EB535B328203737DD4A6A4469782BF2E8FE7E1266
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_f82a39f0d4942b05fc54396fe4c36b62_coinminer_darpapox_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_f82a39f0d4942b05fc54396fe4c36b62_coinminer_darpapox_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_f82a39f0d4942b05fc54396fe4c36b62_coinminer_darpapox_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.9MB
- SHA256 c7216e3f2d1a232260a443c65f02b37dc387af0a568ec5e127e5fb131ff498f1
- MD5 f82a39f0d4942b05fc54396fe4c36b62
- SHA1 865e192512502303cec13e24221cbd4b1c0e0adc
- SHA512 7e18136628e8ec2d65fdac4c2f33b6f5519048d08cbcd02977c2f4124540f8a901e1c7bb9a5a7707c7830ae0a2db11a87660617ee5b1e11514b1d5c3112c246b
- SSDEEP 49152:T3KMRbTChxKCnFnQXBbrtgb/iQvu0UHOaQ:jjR6hxvWbrtUTrUHOR
- TLSH T18C95CD222790CD51F75BC07207E16EB535B328203737DD4A6A4469782BF2E8FE7E1266
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory