General
- Target 2026-08-19_6109c416a8e3e3052026e6d6b76e6b60_coinminer_darpapox_elex_emotet_nymaim_rhadamanthys_stop_wannacry
- Size 5.0MB
- Sample260819-stdqxsdk6z
- SHA256 a3b67f64523e64738e2963fed5b6ead4beee9e57f1efd3095bc788b05755808a
- MD5 6109c416a8e3e3052026e6d6b76e6b60
- SHA1 7b631bf1ffcf3b9e8295e297adc73032bcbc43fe
- SHA512 8bd43ee19d9c6f9c97375e5dd1dce1f693fc742c68d03f0c2939ab22214b16a5636c40073ca0c67a9936c200d4064705ea2e3b2de343658264b13f989ef4ea84
- SSDEEP 98304:Q7JCMeMjLpTGiTnnyX7cgD5OYp6hxvWbrtUTrUHOg:Q7JpeMhTGiDnyXtOYMx+NcIOg
- TLSH T1E436AE8C7ECAC131D65B12B248F22B2855E3A45DF7326ACBDB4C3D768531AD2B5B0712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_6109c416a8e3e3052026e6d6b76e6b60_coinminer_darpapox_elex_emotet_nymaim_rhadamanthys_stop_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_6109c416a8e3e3052026e6d6b76e6b60_coinminer_darpapox_elex_emotet_nymaim_rhadamanthys_stop_wannacry.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_6109c416a8e3e3052026e6d6b76e6b60_coinminer_darpapox_elex_emotet_nymaim_rhadamanthys_stop_wannacry
- Size 5.0MB
- SHA256 a3b67f64523e64738e2963fed5b6ead4beee9e57f1efd3095bc788b05755808a
- MD5 6109c416a8e3e3052026e6d6b76e6b60
- SHA1 7b631bf1ffcf3b9e8295e297adc73032bcbc43fe
- SHA512 8bd43ee19d9c6f9c97375e5dd1dce1f693fc742c68d03f0c2939ab22214b16a5636c40073ca0c67a9936c200d4064705ea2e3b2de343658264b13f989ef4ea84
- SSDEEP 98304:Q7JCMeMjLpTGiTnnyX7cgD5OYp6hxvWbrtUTrUHOg:Q7JpeMhTGiDnyXtOYMx+NcIOg
- TLSH T1E436AE8C7ECAC131D65B12B248F22B2855E3A45DF7326ACBDB4C3D768531AD2B5B0712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory