General
- Target 2026-08-19_22013d1a2805954e96da80c521797210_coinminer_darpapox_elex_emotet_nymaim_rhadamanthys_wannacry
- Size 2.2MB
- Sample260819-tc2xvsdn5x
- SHA256 8d2fd46cead7c213e820af4ad0a46df772e12b22dbfc470f501613ffe31c60f3
- MD5 22013d1a2805954e96da80c521797210
- SHA1 004b3641241272f29ddafe334b850f4c23cfffbe
- SHA512 adcf6783c2a2a6c26f4ec6f39114eda34a656b5ddecbc28f5a2913a7f78368fb389c5efc170032a1ff429964a48b952883cbed3633f4ae57ad624715420e4fd1
- SSDEEP 49152:vI+flbTChxKCnFnQXBbrtgb/iQvu0UHOP:vI+fl6hxvWbrtUTrUHOP
- TLSH T142A5EF01A391C8A1E71BC43143E96F3AB5736D253B37DE835B94BD382BB184AE7B1245
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_22013d1a2805954e96da80c521797210_coinminer_darpapox_elex_emotet_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_22013d1a2805954e96da80c521797210_coinminer_darpapox_elex_emotet_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_22013d1a2805954e96da80c521797210_coinminer_darpapox_elex_emotet_nymaim_rhadamanthys_wannacry
- Size 2.2MB
- SHA256 8d2fd46cead7c213e820af4ad0a46df772e12b22dbfc470f501613ffe31c60f3
- MD5 22013d1a2805954e96da80c521797210
- SHA1 004b3641241272f29ddafe334b850f4c23cfffbe
- SHA512 adcf6783c2a2a6c26f4ec6f39114eda34a656b5ddecbc28f5a2913a7f78368fb389c5efc170032a1ff429964a48b952883cbed3633f4ae57ad624715420e4fd1
- SSDEEP 49152:vI+flbTChxKCnFnQXBbrtgb/iQvu0UHOP:vI+fl6hxvWbrtUTrUHOP
- TLSH T142A5EF01A391C8A1E71BC43143E96F3AB5736D253B37DE835B94BD382BB184AE7B1245
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory