General
- Target 2026-08-12_08c3e9e52f591ebe0a42d405a5262787_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 976KB
- Sample260813-ccn8bshp8w
- SHA256 80f5a3c70ae1ec60c7f645038cdf5caf3cf1bf74c1d068c3734f050267e7d4eb
- MD5 08c3e9e52f591ebe0a42d405a5262787
- SHA1 a137a77ab7325ffab32e9f4c4c6777916cc8cfe7
- SHA512 d8a1176445dc8f209aa6bffdcd09de21f96b06c251d01a947645cdf2d863b3927764685d817748f56898836b356ad804dfe391547897eeb4097b3ebc21dcdf2e
- SSDEEP 24576:1GRzatThRiVNbLGJv6plFh9iGa2oMYMgdsHGek:o8TjFJspDLoVMgdkLk
- TLSH T10B25F0196B80CDA1F36FC07286D06F34B6772A202733CD4A6E4895391BF2E5FE792156
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_08c3e9e52f591ebe0a42d405a5262787_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_08c3e9e52f591ebe0a42d405a5262787_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_08c3e9e52f591ebe0a42d405a5262787_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 976KB
- SHA256 80f5a3c70ae1ec60c7f645038cdf5caf3cf1bf74c1d068c3734f050267e7d4eb
- MD5 08c3e9e52f591ebe0a42d405a5262787
- SHA1 a137a77ab7325ffab32e9f4c4c6777916cc8cfe7
- SHA512 d8a1176445dc8f209aa6bffdcd09de21f96b06c251d01a947645cdf2d863b3927764685d817748f56898836b356ad804dfe391547897eeb4097b3ebc21dcdf2e
- SSDEEP 24576:1GRzatThRiVNbLGJv6plFh9iGa2oMYMgdsHGek:o8TjFJspDLoVMgdkLk
- TLSH T10B25F0196B80CDA1F36FC07286D06F34B6772A202733CD4A6E4895391BF2E5FE792156
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application