General

  • Target
    2026-08-16_fb78e231385d949bad33be4138a9eb1d_coinminer_darpapox_elex_jaku_manuscrypt_nymaim_rhadamanthys_stop_wannacry
  • Size 1.9MB
  • Sample260816-yfptxswtb1
  • SHA256 28d0f1e367c207be1e4171fc0058da21bdca78d7c820f91884da0f39bc7ad1a6
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-08-16_fb78e231385d949bad33be4138a9eb1d_coinminer_darpapox_elex_jaku_manuscrypt_nymaim_rhadamanthys_stop_wannacry
    • Size 1.9MB
    • SHA256 28d0f1e367c207be1e4171fc0058da21bdca78d7c820f91884da0f39bc7ad1a6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks