General
- Target 2026-08-10_1e6748cc0830a416d7b641bc8de29dc2_coinminer_elex_wannacry
- Size 488KB
- Sample260810-plb1ksycqe
- SHA256 fb1a94a0f802c8c57877570f3326fd74cfbf72ed99a0026fd60971ab8697ae1a
- MD5 1e6748cc0830a416d7b641bc8de29dc2
- SHA1 944e0d3c3521b8e2ef49310b47bb2b9c4316e3e6
- SHA512 869437e2862e81ee733602d941b799ded9bbc68e98bd31f0c4e6b3eb9b674387e50f266d8d42415b151e6836c0c7bc42686edb14ac79e8c20a382e3010d3043a
- SSDEEP 6144:mAEYnGp2NMyB72V1eZPPDN71Yxk3Z3wlRZNovl4vUau/1v3yaN9sOq:mAEPIXdz9wzrovlCI93yOVq
- TLSH T14DB4BE1670A5F4ECCA9C1171792C9ABD2E38EC231DD496AFA1D2FBBEF4343424D19126
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_1e6748cc0830a416d7b641bc8de29dc2_coinminer_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_1e6748cc0830a416d7b641bc8de29dc2_coinminer_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_1e6748cc0830a416d7b641bc8de29dc2_coinminer_elex_wannacry
- Size 488KB
- SHA256 fb1a94a0f802c8c57877570f3326fd74cfbf72ed99a0026fd60971ab8697ae1a
- MD5 1e6748cc0830a416d7b641bc8de29dc2
- SHA1 944e0d3c3521b8e2ef49310b47bb2b9c4316e3e6
- SHA512 869437e2862e81ee733602d941b799ded9bbc68e98bd31f0c4e6b3eb9b674387e50f266d8d42415b151e6836c0c7bc42686edb14ac79e8c20a382e3010d3043a
- SSDEEP 6144:mAEYnGp2NMyB72V1eZPPDN71Yxk3Z3wlRZNovl4vUau/1v3yaN9sOq:mAEPIXdz9wzrovlCI93yOVq
- TLSH T14DB4BE1670A5F4ECCA9C1171792C9ABD2E38EC231DD496AFA1D2FBBEF4343424D19126
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.