2026-08-17_e31ac6ee0521cd5050665034bc645f3d_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry

General

Target
2026-08-17_e31ac6ee0521cd5050665034bc645f3d_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
Size 248KB
Sample260817-gf2eaavsc1
SHA256 7e9f7d0d7bd70a18b0b21a39b30d1f154596e38d8abada28b5c6d20f5ab11104
MD5 e31ac6ee0521cd5050665034bc645f3d
SHA1 a52300eb25bc63fbdfb601e51853125a7d8ae931
SHA512 e23f1b115eb85f889ad4274e26518888e3bd35abf9582d6d54414f858531d67ce597df768d733ba4ff379140f7fa56f649357ba04630a6ca2069f6c11e41ea27
SSDEEP 6144:g7WqcWxc5tTBsJWKFGUOfCU6dgn3ox5D06kuwM:ERpxc5tTG7FE6U6jT01rM
TLSH
T1D644D0193AD048B2D0AF80B7C1E5BB28F77B33311366D94B37AC96350D62766F6122D6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-17_e31ac6ee0521cd5050665034bc645f3d_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry

File Explorer

2026-08-17_e31ac6ee0521cd5050665034bc645f3d_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry

.exe 248KB

2026-08-17_e31ac6ee0521cd5050665034bc645f3d_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry

IMPHASH 8ee1d6ac14557b768dcccdd9bb83afc0
SHA256 7e9f7d0d7bd70a18b0b21a39b30d1f154596e38d8abada28b5c6d20f5ab11104
MD5 e31ac6ee0521cd5050665034bc645f3d
SHA1 a52300eb25bc63fbdfb601e51853125a7d8ae931
SHA512 e23f1b115eb85f889ad4274e26518888e3bd35abf9582d6d54414f858531d67ce597df768d733ba4ff379140f7fa56f649357ba04630a6ca2069f6c11e41ea27
SSDEEP 6144:g7WqcWxc5tTBsJWKFGUOfCU6dgn3ox5D06kuwM:ERpxc5tTG7FE6U6jT01rM
TLSH
T1D644D0193AD048B2D0AF80B7C1E5BB28F77B33311366D94B37AC96350D62766F6122D6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

38378

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcAddress GetModuleHandleW GetEnvironmentVariableW GetLastError CreateDirectoryW FindClose FindFirstFileW CloseHandle CreateFileW FreeLibrary OpenProcess WideCharToMultiByte TerminateProcess GetCommandLineW GetModuleFileNameW CreateProcessW lstrlenW GetTempPathW GetModuleHandleA GetOEMCP GetACP SetEndOfFile FlushFileBuffers SetStdHandle GetStringTypeW HeapAlloc GetProcessHeap VirtualAlloc VirtualProtect VirtualFree LoadLibraryA IsBadReadPtr HeapFree DeleteFileW GetTempFileNameW CopyFileW RtlUnwind InterlockedDecrement InterlockedIncrement RaiseException GetStartupInfoW GetVersion ExitProcess HeapReAlloc GetCurrentThreadId TlsSetValue TlsAlloc SetLastError TlsGetValue InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetCurrentProcess HeapSize HeapDestroy HeapCreate IsBadWritePtr SetUnhandledExceptionFilter UnhandledExceptionFilter FreeEnvironmentStringsA MultiByteToWideChar FreeEnvironmentStringsW GetEnvironmentStringsW GetEnvironmentStrings GetCommandLineA SetHandleCount GetStdHandle GetFileType GetStartupInfoA WriteFile GetModuleFileNameA SetFilePointer ReadFile IsBadCodePtr LCMapStringA LCMapStringW GetCPInfo GetStringTypeA

shell32

CommandLineToArgvW

psapi

GetModuleFileNameExW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-17_e31ac6ee0521cd5050665034bc645f3d_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry

kernel32

shell32

psapi

generic