General
- Target 2026-08-12_abb0c297910983c33b7c32050acf680e_coinminer_elex_jaku_nymaim_ramnit_rhadamanthys_wannacry_wapomi
- Size 1.7MB
- Sample260813-gw4vca11dy
- SHA256 d1f7605eb490248006de36f3ebb70011450a92264ea979af2c5e37d4f5452f48
- MD5 abb0c297910983c33b7c32050acf680e
- SHA1 2976bccbba740a13e9e7495049308293411fa7aa
- SHA512 f5d7c3096e00260b3801bcd48674477fdd51b1e91e9a29c7c265ee8506ab2047746b9fc4530e388e8ab6927fa696dd31439fcbe829adb6b08f0e348ffef98143
- SSDEEP 24576:Kv2BLHSn6q1E2ntIoOFdTvMEIJTaoAp6PStm8GRzatThRiVNbLGJv6plFh9iGa2i:Kxn31E2nt6XTmR8TjFJspDLoVMgdkL6
- TLSH T1A08547349601E412FE9E48B9AFF03D246B763D1296A9C587ADC2AD263FFC5459EC01C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-12_abb0c297910983c33b7c32050acf680e_coinminer_elex_jaku_nymaim_ramnit_rhadamanthys_wannacry_wapomi.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_abb0c297910983c33b7c32050acf680e_coinminer_elex_jaku_nymaim_ramnit_rhadamanthys_wannacry_wapomi.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_abb0c297910983c33b7c32050acf680e_coinminer_elex_jaku_nymaim_ramnit_rhadamanthys_wannacry_wapomi
- Size 1.7MB
- SHA256 d1f7605eb490248006de36f3ebb70011450a92264ea979af2c5e37d4f5452f48
- MD5 abb0c297910983c33b7c32050acf680e
- SHA1 2976bccbba740a13e9e7495049308293411fa7aa
- SHA512 f5d7c3096e00260b3801bcd48674477fdd51b1e91e9a29c7c265ee8506ab2047746b9fc4530e388e8ab6927fa696dd31439fcbe829adb6b08f0e348ffef98143
- SSDEEP 24576:Kv2BLHSn6q1E2ntIoOFdTvMEIJTaoAp6PStm8GRzatThRiVNbLGJv6plFh9iGa2i:Kxn31E2nt6XTmR8TjFJspDLoVMgdkL6
- TLSH T1A08547349601E412FE9E48B9AFF03D246B763D1296A9C587ADC2AD263FFC5459EC01C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Loads dropped DLL