General
- Target 2026-08-19_63c9c7101a3352c8054795a4d6d993c7_coinminer_elex_swisyn_wannacry
- Size 7.0MB
- Sample260819-x2q4fa1fre
- SHA256 56b0abd1ae31491c8e2afc132e04eb3bb312cdb185664c331b9036c8912f474e
- MD5 63c9c7101a3352c8054795a4d6d993c7
- SHA1 438d5726609720b7ef848bfa19dbcf75db6e1db8
- SHA512 fb80f1ae66beaea9507cdf37431eec8f461879028466778e490ba289b7070bd4568fd0e62ed0001df9b70fc6a2024c0bd24960eb2a6819efc03e29a09a97cd95
- SSDEEP 98304:wdh+IYmCSVIE4bICJB/D/Ln5vVy0At6dak/0F:wMIhx4bICz/f5dy0A80F
- TLSH T1A3767D01E65620F1DF8F197C54AEFBEB8A3C17A40B293ED7B3242D7B54225D099353A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-19_63c9c7101a3352c8054795a4d6d993c7_coinminer_elex_swisyn_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_63c9c7101a3352c8054795a4d6d993c7_coinminer_elex_swisyn_wannacry.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_63c9c7101a3352c8054795a4d6d993c7_coinminer_elex_swisyn_wannacry
- Size 7.0MB
- SHA256 56b0abd1ae31491c8e2afc132e04eb3bb312cdb185664c331b9036c8912f474e
- MD5 63c9c7101a3352c8054795a4d6d993c7
- SHA1 438d5726609720b7ef848bfa19dbcf75db6e1db8
- SHA512 fb80f1ae66beaea9507cdf37431eec8f461879028466778e490ba289b7070bd4568fd0e62ed0001df9b70fc6a2024c0bd24960eb2a6819efc03e29a09a97cd95
- SSDEEP 98304:wdh+IYmCSVIE4bICJB/D/Ln5vVy0At6dak/0F:wMIhx4bICz/f5dy0A80F
- TLSH T1A3767D01E65620F1DF8F197C54AEFBEB8A3C17A40B293ED7B3242D7B54225D099353A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Detects executables Discord URL observed in first stage droppers
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory