General
- Target 2026-08-19_9f0c660282e2d1394e75e221f21a5906_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.7MB
- Sample260819-2aezbaxwft
- SHA256 ca4b90b34cd823e6432cefaed88472ac13157ca0de23967ef147854e504f32a7
- MD5 9f0c660282e2d1394e75e221f21a5906
- SHA1 ede8288e2052f0d2dcc90a2f896a8d9418a6dc66
- SHA512 2a0a9024721c21d7d4abb35cd65282352acb5f5813ff9360a05dd59ff2ccd8a9831ce9af1fc9cb4869da4f961754f2717df92547c25c9a41c88667448fae9623
- SSDEEP 49152:mbTChxKCnFnQXBbrtgb/iQvu0UHOaYmLA:m6hxvWbrtUTrUHO2s
- TLSH T16685DE252790CD61F36FC07283E16E79B9B329213733D886AE8855716BF2E1FE381195
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_9f0c660282e2d1394e75e221f21a5906_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_9f0c660282e2d1394e75e221f21a5906_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_9f0c660282e2d1394e75e221f21a5906_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.7MB
- SHA256 ca4b90b34cd823e6432cefaed88472ac13157ca0de23967ef147854e504f32a7
- MD5 9f0c660282e2d1394e75e221f21a5906
- SHA1 ede8288e2052f0d2dcc90a2f896a8d9418a6dc66
- SHA512 2a0a9024721c21d7d4abb35cd65282352acb5f5813ff9360a05dd59ff2ccd8a9831ce9af1fc9cb4869da4f961754f2717df92547c25c9a41c88667448fae9623
- SSDEEP 49152:mbTChxKCnFnQXBbrtgb/iQvu0UHOaYmLA:m6hxvWbrtUTrUHO2s
- TLSH T16685DE252790CD61F36FC07283E16E79B9B329213733D886AE8855716BF2E1FE381195
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory