2026-08-16_7d7a4fb49ad5da76217ea666d0d94ca1_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-16_7d7a4fb49ad5da76217ea666d0d94ca1_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
Size 1.7MB
Sample260816-cldsysxfqc
SHA256 fa3cfba652d1b8a642a4bd03f976011bc5c2afd2005b4e5b693c94c128a40945
MD5 7d7a4fb49ad5da76217ea666d0d94ca1
SHA1 3b91861ba64ea09bed99c64a637d428c1bad23bd
SHA512 5e2c1a1cb8654a8feffd8a3b40b619c5f32751d4da41f048a30f4dfc10bc2de5e857f5fb12482c076c5e25cc6874f6cf2de53c90c014129d437129e8930f6a16
SSDEEP 24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UN0:mbTChxKCnFnQXBbrtgb/iQvu0UHOd
TLSH
T1C185DD252790CCA1F36FC07683E56E79B5B329213B33DC866A8855316BF2E2FE381155
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-16_7d7a4fb49ad5da76217ea666d0d94ca1_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry

File Explorer

2026-08-16_7d7a4fb49ad5da76217ea666d0d94ca1_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry

.exe 1.7MB

2026-08-16_7d7a4fb49ad5da76217ea666d0d94ca1_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry

IMPHASH 60fbd35de1521df68e303d54b2c1b0c8
SHA256 fa3cfba652d1b8a642a4bd03f976011bc5c2afd2005b4e5b693c94c128a40945
MD5 7d7a4fb49ad5da76217ea666d0d94ca1
SHA1 3b91861ba64ea09bed99c64a637d428c1bad23bd
SHA512 5e2c1a1cb8654a8feffd8a3b40b619c5f32751d4da41f048a30f4dfc10bc2de5e857f5fb12482c076c5e25cc6874f6cf2de53c90c014129d437129e8930f6a16
SSDEEP 24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UN0:mbTChxKCnFnQXBbrtgb/iQvu0UHOd
TLSH
T1C185DD252790CCA1F36FC07683E56E79B5B329213B33DC866A8855316BF2E2FE381155
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

55152

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetEnvironmentVariableW GetLastError CreateDirectoryW FindClose FindFirstFileW CloseHandle CreateFileW FreeLibrary GetDriveTypeW MultiByteToWideChar TerminateThread GetCurrentThread GetExitCodeThread WaitForSingleObject GetModuleHandleW WideCharToMultiByte GetTempFileNameW GetTempPathW LoadLibraryA GetSystemDefaultLangID GetComputerNameW SetFileAttributesW CopyFileW Sleep GetCurrentProcessId GetModuleFileNameW CreateProcessW lstrlenW GetSystemInfo GetVersionExW SetEnvironmentVariableA GetOEMCP CreateThread GetProcAddress GetACP CompareStringW CompareStringA SetEndOfFile GetStringTypeW GetStringTypeA FlushFileBuffers HeapAlloc GetProcessHeap VirtualAlloc VirtualProtect VirtualFree IsBadReadPtr HeapFree DeleteFileW GetSystemTime RtlUnwind GetTimeZoneInformation InterlockedDecrement InterlockedIncrement RaiseException GetModuleHandleA GetStartupInfoW GetVersion ExitProcess HeapReAlloc GetCurrentThreadId TlsSetValue TlsAlloc SetLastError TlsGetValue InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess HeapSize HeapDestroy HeapCreate IsBadWritePtr WriteFile SetUnhandledExceptionFilter UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStringsW GetEnvironmentStrings GetCommandLineW GetCommandLineA SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetModuleFileNameA SetFilePointer ReadFile IsBadCodePtr LCMapStringA LCMapStringW GetCPInfo SetStdHandle

user32

GetSystemMetrics wsprintfW

advapi32

GetUserNameW

iphlpapi

GetAdaptersInfo

ws2_32

inet_addr

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-16_7d7a4fb49ad5da76217ea666d0d94ca1_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry

kernel32

user32

advapi32

iphlpapi

ws2_32

generic