General
- Target 2026-08-12_3fbdb0f38b5f734d3a403b1713cb320c_coinminer_darpapox_elex_nymaim_rhadamanthys_wannacry
- Size 2.9MB
- Sample260813-bq19daxves
- SHA256 a87fa5e2df5081f326d448969a865f9439bc5576a3fd02cab701311dfbdd6beb
- MD5 3fbdb0f38b5f734d3a403b1713cb320c
- SHA1 e3ef573b6607b3de4065e5b13395e5c4e4761aad
- SHA512 413c0ebe9d320a2f0d322e64b2e94c57b710d3b2c1e586cd7d8d9622001258f8ee6e8d61d88a38cab82edeb01b620b310d76512c26acd3ab030f651b139f1582
- SSDEEP 24576:/PnXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0b:ntbTChxKCnFnQXBbrtgb/iQvu0UHO/
- TLSH T1ADD5EF192380CE20F36FC0B243D15E79B57329313773D896AA486A352BF1E9FE791256
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_3fbdb0f38b5f734d3a403b1713cb320c_coinminer_darpapox_elex_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_3fbdb0f38b5f734d3a403b1713cb320c_coinminer_darpapox_elex_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_3fbdb0f38b5f734d3a403b1713cb320c_coinminer_darpapox_elex_nymaim_rhadamanthys_wannacry
- Size 2.9MB
- SHA256 a87fa5e2df5081f326d448969a865f9439bc5576a3fd02cab701311dfbdd6beb
- MD5 3fbdb0f38b5f734d3a403b1713cb320c
- SHA1 e3ef573b6607b3de4065e5b13395e5c4e4761aad
- SHA512 413c0ebe9d320a2f0d322e64b2e94c57b710d3b2c1e586cd7d8d9622001258f8ee6e8d61d88a38cab82edeb01b620b310d76512c26acd3ab030f651b139f1582
- SSDEEP 24576:/PnXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0b:ntbTChxKCnFnQXBbrtgb/iQvu0UHO/
- TLSH T1ADD5EF192380CE20F36FC0B243D15E79B57329313773D896AA486A352BF1E9FE791256
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory