General
- Target 2026-08-15_59563aca0f9ee3960061ca901ac4a6a5_coinminer_elex_upatre_wannacry
- Size 29KB
- Sample260815-rms2layalf
- SHA256 4cf593d8851b34d975ab220628b3c21108853b8ac2506244bd375898f0a7c546
- MD5 59563aca0f9ee3960061ca901ac4a6a5
- SHA1 076fa06f661f1790fa3cf40ce239660973896687
- SHA512 098827367f855ed38a61cb7a1f2b446c69c86bfb118c77dc4b60f8ec5a5d6541274ab86ef157ba1b43606b721f78bdc121ed312e96bd0b2aeee05c5e92790777
- SSDEEP 384:LLz3qWcd5DUVQQ4oM+JKcMef9YlWRhQIUY/FYHZxgO8vixamynIsfbsT99M:Xz3qWc7Re1Jen6hpFwxgOTE5jf4TM
- TLSH T18AD208DED9C60559C8963F3B92FA5B0090289E1D87646AEBE9A4F8438D7F3C14C31D9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-15_59563aca0f9ee3960061ca901ac4a6a5_coinminer_elex_upatre_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_59563aca0f9ee3960061ca901ac4a6a5_coinminer_elex_upatre_wannacry
- Size 29KB
- SHA256 4cf593d8851b34d975ab220628b3c21108853b8ac2506244bd375898f0a7c546
- MD5 59563aca0f9ee3960061ca901ac4a6a5
- SHA1 076fa06f661f1790fa3cf40ce239660973896687
- SHA512 098827367f855ed38a61cb7a1f2b446c69c86bfb118c77dc4b60f8ec5a5d6541274ab86ef157ba1b43606b721f78bdc121ed312e96bd0b2aeee05c5e92790777
- SSDEEP 384:LLz3qWcd5DUVQQ4oM+JKcMef9YlWRhQIUY/FYHZxgO8vixamynIsfbsT99M:Xz3qWc7Re1Jen6hpFwxgOTE5jf4TM
- TLSH T18AD208DED9C60559C8963F3B92FA5B0090289E1D87646AEBE9A4F8438D7F3C14C31D9C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE