General
- Target 2026-08-10_4700c430afae74ed6b3ae806fe064a5b_coinminer_darkgate_darpapox_elex_gcleaner_nymaim_rhadamanthys_wannacry
- Size 3.6MB
- Sample260810-mmcmdsfn4w
- SHA256 646945239a53d97aea1a1d270bfcfe8cf4f8ed813a9cc36c1a36a16c22efcd6d
- MD5 4700c430afae74ed6b3ae806fe064a5b
- SHA1 26f3c7ffddd8e3c53bf7cb03d49649680ec1d64c
- SHA512 d5eabdcb77bfdb8fe9eafbfce6cde25cd8f8ac0c842ad352f3316252f4047e655ffc598cdb7c64eb3ecca600a1737cc46097a2b5ecb348fa0cf8c3d50faf9086
- SSDEEP 49152:liCX7AJ0nyrSpzdAWtGHD9Fp1uAFnx/0RbTChxKCnFnQXBbrtgb/iQvu0UHOP:limAJ0nQWASGHiAcR6hxvWbrtUTrUHOP
- TLSH T19E06E0127243DC39E55FA13143E2A9F364776E50BBE3AC023AD4B438CFB58869F66911
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_4700c430afae74ed6b3ae806fe064a5b_coinminer_darkgate_darpapox_elex_gcleaner_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_4700c430afae74ed6b3ae806fe064a5b_coinminer_darkgate_darpapox_elex_gcleaner_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_4700c430afae74ed6b3ae806fe064a5b_coinminer_darkgate_darpapox_elex_gcleaner_nymaim_rhadamanthys_wannacry
- Size 3.6MB
- SHA256 646945239a53d97aea1a1d270bfcfe8cf4f8ed813a9cc36c1a36a16c22efcd6d
- MD5 4700c430afae74ed6b3ae806fe064a5b
- SHA1 26f3c7ffddd8e3c53bf7cb03d49649680ec1d64c
- SHA512 d5eabdcb77bfdb8fe9eafbfce6cde25cd8f8ac0c842ad352f3316252f4047e655ffc598cdb7c64eb3ecca600a1737cc46097a2b5ecb348fa0cf8c3d50faf9086
- SSDEEP 49152:liCX7AJ0nyrSpzdAWtGHD9Fp1uAFnx/0RbTChxKCnFnQXBbrtgb/iQvu0UHOP:limAJ0nQWASGHiAcR6hxvWbrtUTrUHOP
- TLSH T19E06E0127243DC39E55FA13143E2A9F364776E50BBE3AC023AD4B438CFB58869F66911
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory