General
- Target 2026-08-12_cb48d2bed82e3bdaca6d1a474073adda_coinminer_darpapox_elex_nymaim_rhadamanthys_wannacry
- Size 2.9MB
- Sample260813-aexldaxdlf
- SHA256 20c323d63c83cd04053e0648c2e1775a6032b9e291a484e51d9bc20596e9cc61
- MD5 cb48d2bed82e3bdaca6d1a474073adda
- SHA1 bf7a5b42cd337196a1d36708c5a7f3dd85f3d8d4
- SHA512 a78c13b4a060d99c25d593be9df9ccc69670766ad4fe6bfa043c290620475da70e382bf414f6ab61d7f4501ddcddee1f3085f5dc9cfc825a03803d473abc9f57
- SSDEEP 24576:qTXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0U2:qJbTChxKCnFnQXBbrtgb/iQvu0UHOF
- TLSH T13AE5CF163711C855E60A8071AED0CAFC65337C21EF22DC277AD07B7F37B59ABA680991
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_cb48d2bed82e3bdaca6d1a474073adda_coinminer_darpapox_elex_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_cb48d2bed82e3bdaca6d1a474073adda_coinminer_darpapox_elex_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_cb48d2bed82e3bdaca6d1a474073adda_coinminer_darpapox_elex_nymaim_rhadamanthys_wannacry
- Size 2.9MB
- SHA256 20c323d63c83cd04053e0648c2e1775a6032b9e291a484e51d9bc20596e9cc61
- MD5 cb48d2bed82e3bdaca6d1a474073adda
- SHA1 bf7a5b42cd337196a1d36708c5a7f3dd85f3d8d4
- SHA512 a78c13b4a060d99c25d593be9df9ccc69670766ad4fe6bfa043c290620475da70e382bf414f6ab61d7f4501ddcddee1f3085f5dc9cfc825a03803d473abc9f57
- SSDEEP 24576:qTXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0U2:qJbTChxKCnFnQXBbrtgb/iQvu0UHOF
- TLSH T13AE5CF163711C855E60A8071AED0CAFC65337C21EF22DC277AD07B7F37B59ABA680991
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory