General
- Target 2026-08-19_a480fe1691cc519b9580d14f4edd4b31_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.7MB
- Sample260820-abfhpayxd1
- SHA256 1f3831263613c6f9731fafd0a1382dcad0c08d52bfb04b90ed905a50e653a8f5
- MD5 a480fe1691cc519b9580d14f4edd4b31
- SHA1 91f057dfed88906441dfa49e206722695bc9d200
- SHA512 1b940d56c43fc45ed2ce79896dd7a67c9989ff1d4356aeb2f74926cf01a0fbe55d3792420c25c06779a3b22f1c4671a244cd410430973f15cefeeaef481088eb
- SSDEEP 24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UNA:mbTChxKCnFnQXBbrtgb/iQvu0UHOPb
- TLSH T15B8501152790CD61F36FC07283E5AF79B6B329213733D8966B4855312BF2E2EE781096
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_a480fe1691cc519b9580d14f4edd4b31_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_a480fe1691cc519b9580d14f4edd4b31_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_a480fe1691cc519b9580d14f4edd4b31_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
- Size 1.7MB
- SHA256 1f3831263613c6f9731fafd0a1382dcad0c08d52bfb04b90ed905a50e653a8f5
- MD5 a480fe1691cc519b9580d14f4edd4b31
- SHA1 91f057dfed88906441dfa49e206722695bc9d200
- SHA512 1b940d56c43fc45ed2ce79896dd7a67c9989ff1d4356aeb2f74926cf01a0fbe55d3792420c25c06779a3b22f1c4671a244cd410430973f15cefeeaef481088eb
- SSDEEP 24576:OXdVtTj2i64T+jdxQCfgOFD3WSwd2QtBBw6xxhVxQtmibjOhZaiRu/4oMaop0UNA:mbTChxKCnFnQXBbrtgb/iQvu0UHOPb
- TLSH T15B8501152790CD61F36FC07283E5AF79B6B329213733D8966B4855312BF2E2EE781096
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory