General
- Target 2026-08-19_e3c22ff4f150a6fdeac44754d28eafc2_coinminer_darpapox_elex_glassworm_jaku_nymaim_rhadamanthys_wannacry
- Size 2.1MB
- Sample260819-rt744aff37
- SHA256 3bcfda473702c23ac023bd1a9b96dbb16e2a7af5640014a2ae16de9fec427b31
- MD5 e3c22ff4f150a6fdeac44754d28eafc2
- SHA1 607b41a6a147420d6b7ea235215547f80e92164b
- SHA512 283123adb9fe0241454ab4b0c0c854d48851e62b53eaa3f1ef68e0bbba2417d2d457a55f43f4265d13d6dabe7197f5760ce62ceb6d2c89208052892768e70be3
- SSDEEP 24576:Cu0Lu0Ya5nXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/A:CtvtbTChxKCnFnQXBbrtgb/iQvu0UHOo
- TLSH T138A5E0041B58CC90FA6FC93683D12E7170376C2973B6CD91AE9C7A7157F0DAAE7848A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_e3c22ff4f150a6fdeac44754d28eafc2_coinminer_darpapox_elex_glassworm_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_e3c22ff4f150a6fdeac44754d28eafc2_coinminer_darpapox_elex_glassworm_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_e3c22ff4f150a6fdeac44754d28eafc2_coinminer_darpapox_elex_glassworm_jaku_nymaim_rhadamanthys_wannacry
- Size 2.1MB
- SHA256 3bcfda473702c23ac023bd1a9b96dbb16e2a7af5640014a2ae16de9fec427b31
- MD5 e3c22ff4f150a6fdeac44754d28eafc2
- SHA1 607b41a6a147420d6b7ea235215547f80e92164b
- SHA512 283123adb9fe0241454ab4b0c0c854d48851e62b53eaa3f1ef68e0bbba2417d2d457a55f43f4265d13d6dabe7197f5760ce62ceb6d2c89208052892768e70be3
- SSDEEP 24576:Cu0Lu0Ya5nXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/A:CtvtbTChxKCnFnQXBbrtgb/iQvu0UHOo
- TLSH T138A5E0041B58CC90FA6FC93683D12E7170376C2973B6CD91AE9C7A7157F0DAAE7848A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory