General
- Target 2026-08-19_0b64084073f2ab899c6bdf4065fc4620_coinminer_darpapox_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 2.0MB
- Sample260819-tksddsxgpe
- SHA256 f1af2b1e2d5e4638eb45b0c42441b027d9662c4d1bfa1ac35501bff7bd41e067
- MD5 0b64084073f2ab899c6bdf4065fc4620
- SHA1 8385f043a065d6bdea63b1392953e4fff5317242
- SHA512 89797285e11d06ae17fca511d724642210e1c67aeec52acd6a6c470ef078632e4471cd3224f4a402ae33df60e1272abe6310070be793407bfd31f42fa0628feb
- SSDEEP 49152:92Pr/ZhCk1Ii3QGQhdbTChxKCnFnQXBbrtgb/iQvu0UHO/:92Pr/l1IigLd6hxvWbrtUTrUHO/
- TLSH T141A5DF112790CC21F2AFD27257E55E36747778213B33C98BAB4805391BF1E9BE7A1262
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_0b64084073f2ab899c6bdf4065fc4620_coinminer_darpapox_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_0b64084073f2ab899c6bdf4065fc4620_coinminer_darpapox_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_0b64084073f2ab899c6bdf4065fc4620_coinminer_darpapox_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 2.0MB
- SHA256 f1af2b1e2d5e4638eb45b0c42441b027d9662c4d1bfa1ac35501bff7bd41e067
- MD5 0b64084073f2ab899c6bdf4065fc4620
- SHA1 8385f043a065d6bdea63b1392953e4fff5317242
- SHA512 89797285e11d06ae17fca511d724642210e1c67aeec52acd6a6c470ef078632e4471cd3224f4a402ae33df60e1272abe6310070be793407bfd31f42fa0628feb
- SSDEEP 49152:92Pr/ZhCk1Ii3QGQhdbTChxKCnFnQXBbrtgb/iQvu0UHO/:92Pr/l1IigLd6hxvWbrtUTrUHO/
- TLSH T141A5DF112790CC21F2AFD27257E55E36747778213B33C98BAB4805391BF1E9BE7A1262
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory