General
- Target 2026-08-16_0c12f0950fab8c1d116aca2367f47669_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.7MB
- Sample260816-ss6ejs1cqg
- SHA256 7ebbd1348c33340e718fa43a8ab2897e97c3b61744c8e6061ef1facb0b83971b
- MD5 0c12f0950fab8c1d116aca2367f47669
- SHA1 f13c86597a5dc06dbda47f8ab0db852f5dbfaea2
- SHA512 9a50845eb6740a468f26ff9c904157f05cb5afeab71d68c66a4b0ebca7809baa0a5caa03c93e82a49c6d107071f357703ff05f843c3ccdaa7ec2d6159942a3e3
- SSDEEP 24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UNZ:mbTChxKCnFnQXBbrtgb/iQvu0UHOE
- TLSH T1738511252390CD61F36FC07283E56F79B6B329213733D8866B4855316BF2E2EE781196
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_0c12f0950fab8c1d116aca2367f47669_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_0c12f0950fab8c1d116aca2367f47669_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_0c12f0950fab8c1d116aca2367f47669_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.7MB
- SHA256 7ebbd1348c33340e718fa43a8ab2897e97c3b61744c8e6061ef1facb0b83971b
- MD5 0c12f0950fab8c1d116aca2367f47669
- SHA1 f13c86597a5dc06dbda47f8ab0db852f5dbfaea2
- SHA512 9a50845eb6740a468f26ff9c904157f05cb5afeab71d68c66a4b0ebca7809baa0a5caa03c93e82a49c6d107071f357703ff05f843c3ccdaa7ec2d6159942a3e3
- SSDEEP 24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UNZ:mbTChxKCnFnQXBbrtgb/iQvu0UHOE
- TLSH T1738511252390CD61F36FC07283E56F79B6B329213733D8866B4855316BF2E2EE781196
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory