General
- Target 2026-08-19_ab24b3c64d7acfb86f316b46edc30687_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.7MB
- Sample260819-16w22avbna
- SHA256 650c61fbb37a3b9e3b9e41831691178c3a61b3c6bbff1aaab972c79635c6ebee
- MD5 ab24b3c64d7acfb86f316b46edc30687
- SHA1 60667d2e1d37036bff504da1f2bb987672797e5e
- SHA512 deff2ab6e8eade30fd6d05e8d5596451caa53854a89fac9051ada54d4603b547e020d0f6269c5f1a2af8b170f8c3370b5a315e7ab02e176799280bc959095207
- SSDEEP 24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UNz:mbTChxKCnFnQXBbrtgb/iQvu0UHOK
- TLSH T1D985FF152790CDA1F36FC07283E56E79B5B329213733D896AE4851312BF2E2FE781196
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_ab24b3c64d7acfb86f316b46edc30687_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_ab24b3c64d7acfb86f316b46edc30687_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_ab24b3c64d7acfb86f316b46edc30687_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.7MB
- SHA256 650c61fbb37a3b9e3b9e41831691178c3a61b3c6bbff1aaab972c79635c6ebee
- MD5 ab24b3c64d7acfb86f316b46edc30687
- SHA1 60667d2e1d37036bff504da1f2bb987672797e5e
- SHA512 deff2ab6e8eade30fd6d05e8d5596451caa53854a89fac9051ada54d4603b547e020d0f6269c5f1a2af8b170f8c3370b5a315e7ab02e176799280bc959095207
- SSDEEP 24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UNz:mbTChxKCnFnQXBbrtgb/iQvu0UHOK
- TLSH T1D985FF152790CDA1F36FC07283E56E79B5B329213733D896AE4851312BF2E2FE781196
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Adds Run key to start application
Drops file in System32 directory