General
- Target 2026-08-15_541ba9f357146b1c7db18a4f422df0cc_coinminer_elex_upatre_wannacry
- Size 29KB
- Sample260815-gpb6rafp3y
- SHA256 187e62e00ab5fc33a305f35f0652cfd4681f6a8bb450dd64c16e0736405dd394
- MD5 541ba9f357146b1c7db18a4f422df0cc
- SHA1 a671e27a59955889bdc747a4fca2411962cd0c35
- SHA512 b3d10ee17374a85eb0ef8dd18967c627a9b4223efddee78536d0b986129607e247f72045196d7489c4996bcdaa79cdef0f432433358c3eb85fc943333fd0564e
- SSDEEP 384:LLz3qWcd5DUVQQ4oM+JKcMef9YlWRhQIUY/FYHZxgO8vixamynIsfbsT94:Xz3qWc7Re1Jen6hpFwxgOTE5jf4i
- TLSH T1F5D2F8DED9C60559C8963F3B92FA5B0090289E1D87645AEBE9A4FC438D7F2C14C31D9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-15_541ba9f357146b1c7db18a4f422df0cc_coinminer_elex_upatre_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_541ba9f357146b1c7db18a4f422df0cc_coinminer_elex_upatre_wannacry
- Size 29KB
- SHA256 187e62e00ab5fc33a305f35f0652cfd4681f6a8bb450dd64c16e0736405dd394
- MD5 541ba9f357146b1c7db18a4f422df0cc
- SHA1 a671e27a59955889bdc747a4fca2411962cd0c35
- SHA512 b3d10ee17374a85eb0ef8dd18967c627a9b4223efddee78536d0b986129607e247f72045196d7489c4996bcdaa79cdef0f432433358c3eb85fc943333fd0564e
- SSDEEP 384:LLz3qWcd5DUVQQ4oM+JKcMef9YlWRhQIUY/FYHZxgO8vixamynIsfbsT94:Xz3qWc7Re1Jen6hpFwxgOTE5jf4i
- TLSH T1F5D2F8DED9C60559C8963F3B92FA5B0090289E1D87645AEBE9A4FC438D7F2C14C31D9C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE