General
- Target 2026-08-19_12a78fc0024c9c3daee695886ced5ae1_coinminer_darkgate_darpapox_elex_gcleaner_jaku_nymaim_rhadamanthys_wannacry
- Size 2.1MB
- Sample260819-thkwjagb25
- SHA256 917c34d0b83bf56b5f970b8f29394d20c8b113a2820839b5c3e2a6bb06ebcc23
- MD5 12a78fc0024c9c3daee695886ced5ae1
- SHA1 f11bfcc5a940ed0d8582320bb53d5f0e6bd619f3
- SHA512 e1dfb6613c9e8d03312485ea83f52ddbc2033031a6a7bafe0c3d24e8e0484a756a8144ce81ff6a385937aab5f7ea3cd1134250296e427035fabd3e58f8bd52ed
- SSDEEP 49152:sGn1d1bTChxKCnFnQXBbrtgb/iQvu0UHOL:ss1d16hxvWbrtUTrUHOL
- TLSH T1F4A5EF21A790CC32E36FD5394BDA5E74B83779203B37DC452E8818385BB5E4BE791292
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_12a78fc0024c9c3daee695886ced5ae1_coinminer_darkgate_darpapox_elex_gcleaner_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_12a78fc0024c9c3daee695886ced5ae1_coinminer_darkgate_darpapox_elex_gcleaner_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_12a78fc0024c9c3daee695886ced5ae1_coinminer_darkgate_darpapox_elex_gcleaner_jaku_nymaim_rhadamanthys_wannacry
- Size 2.1MB
- SHA256 917c34d0b83bf56b5f970b8f29394d20c8b113a2820839b5c3e2a6bb06ebcc23
- MD5 12a78fc0024c9c3daee695886ced5ae1
- SHA1 f11bfcc5a940ed0d8582320bb53d5f0e6bd619f3
- SHA512 e1dfb6613c9e8d03312485ea83f52ddbc2033031a6a7bafe0c3d24e8e0484a756a8144ce81ff6a385937aab5f7ea3cd1134250296e427035fabd3e58f8bd52ed
- SSDEEP 49152:sGn1d1bTChxKCnFnQXBbrtgb/iQvu0UHOL:ss1d16hxvWbrtUTrUHOL
- TLSH T1F4A5EF21A790CC32E36FD5394BDA5E74B83779203B37DC452E8818385BB5E4BE791292
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory