General
- Target 2026-08-19_c58cd8aa78a53d6096cca2f8c76b115c_coinminer_darpapox_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.9MB
- Sample260819-v754fage78
- SHA256 7fef3069d861684a6b17c8610bdb50692883ef05e3215fc761d557ec10990813
- MD5 c58cd8aa78a53d6096cca2f8c76b115c
- SHA1 f1b9066f525f1a4734d9e0e4f256e5ecbf31686d
- SHA512 649e3f369ca838f4f72132dacef21db29a594226b10713b98ba477ce74c1ad03ae8af50635de34b751971f3a2c73efa63f432d918749b28bc5eaa23c0620fbe2
- SSDEEP 49152:wWvC5tbTChxKCnFnQXBbrtgb/iQvu0UHOq:wWvSt6hxvWbrtUTrUHOq
- TLSH T16495DE112390CC65F3AFC17297E56E75BAB369213B33CC4A5A4815352BF2E6FD390262
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_c58cd8aa78a53d6096cca2f8c76b115c_coinminer_darpapox_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_c58cd8aa78a53d6096cca2f8c76b115c_coinminer_darpapox_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_c58cd8aa78a53d6096cca2f8c76b115c_coinminer_darpapox_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.9MB
- SHA256 7fef3069d861684a6b17c8610bdb50692883ef05e3215fc761d557ec10990813
- MD5 c58cd8aa78a53d6096cca2f8c76b115c
- SHA1 f1b9066f525f1a4734d9e0e4f256e5ecbf31686d
- SHA512 649e3f369ca838f4f72132dacef21db29a594226b10713b98ba477ce74c1ad03ae8af50635de34b751971f3a2c73efa63f432d918749b28bc5eaa23c0620fbe2
- SSDEEP 49152:wWvC5tbTChxKCnFnQXBbrtgb/iQvu0UHOq:wWvSt6hxvWbrtUTrUHOq
- TLSH T16495DE112390CC65F3AFC17297E56E75BAB369213B33CC4A5A4815352BF2E6FD390262
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory