General
- Target 2026-08-14_60814dd5b606d2bb8aa71a07fc32b13e_coinminer_elex_wannacry
- Size 488KB
- Sample260814-x5vk2abe95
- SHA256 49e8ce956460f8557f11ce30893dcb0be1a95f384055cbd3d3cebf8b24300f08
- MD5 60814dd5b606d2bb8aa71a07fc32b13e
- SHA1 a4f18141fc74c57aae87bac77e304781a9ae28f2
- SHA512 a0ecc5fecd9394b533b21c08948a123eb069e3d630b7f9b7c93f51d3a7ee45e2d4d988f04d5ba5861f9e9e687486ba1b51e895a2c89aa55fa1846e84e275c0a8
- SSDEEP 6144:mAEihp6EceY7v7mY9zIDZmvs0xMxvpPvQDkau/1v3yaN9sOq:mAEIQ/CY6ovs0xMfQ093yOVq
- TLSH T1F1B48B45F4D6983FD9B1E0F81A3641A3E2E12D236CD1699BAE9E779CD4342BE3B00147
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_60814dd5b606d2bb8aa71a07fc32b13e_coinminer_elex_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_60814dd5b606d2bb8aa71a07fc32b13e_coinminer_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_60814dd5b606d2bb8aa71a07fc32b13e_coinminer_elex_wannacry
- Size 488KB
- SHA256 49e8ce956460f8557f11ce30893dcb0be1a95f384055cbd3d3cebf8b24300f08
- MD5 60814dd5b606d2bb8aa71a07fc32b13e
- SHA1 a4f18141fc74c57aae87bac77e304781a9ae28f2
- SHA512 a0ecc5fecd9394b533b21c08948a123eb069e3d630b7f9b7c93f51d3a7ee45e2d4d988f04d5ba5861f9e9e687486ba1b51e895a2c89aa55fa1846e84e275c0a8
- SSDEEP 6144:mAEihp6EceY7v7mY9zIDZmvs0xMxvpPvQDkau/1v3yaN9sOq:mAEIQ/CY6ovs0xMfQ093yOVq
- TLSH T1F1B48B45F4D6983FD9B1E0F81A3641A3E2E12D236CD1699BAE9E779CD4342BE3B00147
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.